General

  • Target

    ExitLag.rar

  • Size

    20.3MB

  • MD5

    254fc4ac9337df027da2b3c8402c9e97

  • SHA1

    6d383ab810084d71a0689cfcc3ad20ca12c7cf8a

  • SHA256

    88feaa6acdfd75de35b39c26b4f772f9f136ec0b9db74a3c7f4045653bda463b

  • SHA512

    7601f74f7b6d63c65642b981161cbf3ee93ae704a37d691b037cdec7804354812232d8075614539558574442166be5b62608c6a6deb40b5a51abc895e37e4e4d

  • SSDEEP

    393216:gfNooEAw1xPTGiJYFoIc21J53rSqeCXBjjGzDLpWw18RYitDJc:gEAwXaUTmH5eCpCQ08/Jc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • ExitLag.rar
    .rar

    Password: exitlag

  • ExitLag/Exitlag by fazbear.exe
    .exe windows:6 windows x86 arch:x86

    Password: exitlag

    165fb41197374f2ff6eecfd747853af1


    Headers

    Imports

    Sections

  • ExitLag/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    92fc526ad6d9674f09604104cfa57819


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    443275a6eb00ad3c85c2bc9c3fc2da3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    21f558b450210bd1bd9ad26b203188e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Qml.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    1fd44f6df8b7c02f1c6b3a63b910f091


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Sql.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    70a47e1e97f0e5b296f8049b37e6d7c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    079b726a4a2f3a027f09f1cb4e2ed381


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: exitlag

    7485e296f2ad020a3dedc3de1b20dcfc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5WinExtras.dll
    .dll windows:6 windows x86 arch:x86

    6a5932ee8dcef2f266e2e0e799f280b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/Qt5Xml.dll
    .dll windows:6 windows x86 arch:x86

    c68185160d9b068a2cba58d817f9e50c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-core-xstate-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/api-ms-win-eventing-provider-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExitLag/bz2.dll
    .dll windows:6 windows x86 arch:x86

    8494b8cd0d3a160889125b57308e96da


    Headers

    Imports

    Exports

    Sections

  • ExitLag/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    7f269ea2d96d8d376f2c7642ddadc7bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/exitlag.dll
    .dll windows:6 windows x86 arch:x86

    2fdcf75d106dcbcc94d8607582b8f44f


    Headers

    Imports

    Exports

    Sections

  • ExitLag/exitlag_reboot_required.exe
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Code Sign

    Headers

    Imports

    Sections

  • ExitLag/handler.exe
    .exe windows:6 windows x86 arch:x86

    55372fa81dbad45643ddf07b0be96673


    Headers

    Imports

    Sections

  • ExitLag/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    e2a8abb2f62e90497419fca861c4de3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    5fd27c15059ed7d25ce61b5068776b9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    e9072e2a0e32154032ac95db134bc344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    b127d2b5eb2d64741e8cf3a684f53083


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    0ee7f60098b60d828daa90a658ce1e89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    99e575340214e1344b829f73fc103448


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    5d2534ece75e4b6d48b90a3a5ab461ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    2388c0b64a24970ee09483c444670343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    cb222c05c5fe195a9fc1087938b86d12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    92b10182dd96972184b6f43d0e7f28dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    9c98d3b5bee3ee0c5c0fdfcb4d295c31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/libGLESv2.dll
    .dll windows:6 windows x86 arch:x86

    f8b0d2c74b0eba5e3cf30c77474b84b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    5da1c33e631513c0052c0a74552cb4e6


    Headers

    Imports

    Exports

    Sections

  • ExitLag/libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    491b3c526e3fbd3edc86a77c9f2a9644


    Headers

    Imports

    Exports

    Sections

  • ExitLag/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    e6e369e8358d06fe7366f18bdf54ce38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/msvcp140_1.dll
    .dll windows:6 windows x86 arch:x86

    f7048cec2ec6ab2b8852c6216a8beda7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/ndisapi.dll
    .dll windows:6 windows x86 arch:x86

    85354c8856ddb9dd780a08c5c2c1dc3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/nfapi.dll
    .dll windows:6 windows x86 arch:x86

    c9a99ff643181103f917041ceaa38d64


    Headers

    Imports

    Exports

    Sections

  • ExitLag/nfregdrv.exe
    .exe windows:4 windows x86 arch:x86

    1608300345f2399f6ab2c40f09b7edbb


    Code Sign

    Headers

    Imports

    Sections

  • ExitLag/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    96787902f59fced940d332fc8148bd5c


    Headers

    Imports

    Exports

    Sections

  • ExitLag/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    29ed2e73839186c2a3b5a58cddc0eb48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/snetcfg.exe
    .exe windows:5 windows x64 arch:x64

    cef93da515744014629bc14ba0ac6191


    Headers

    Imports

    Sections

  • ExitLag/sqldrivers/qsqlite.dll
    .dll windows:6 windows x86 arch:x86

    bb42a33abf38e21d733002320b0e6cc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/sqldrivers/qsqlodbc.dll
    .dll windows:6 windows x86 arch:x86

    b05e674b2e3ed4f46ea65b99535ac45c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/sqldrivers/qsqlpsql.dll
    .dll windows:6 windows x86 arch:x86

    ca2b437e263fd97a7449be0efc04b8b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x86 arch:x86

    0404caa26e442821bc38f28b50ba0493


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/translations/qt_ar.qm
  • ExitLag/translations/qt_bg.qm
  • ExitLag/translations/qt_ca.qm
  • ExitLag/translations/qt_cs.qm
  • ExitLag/translations/qt_da.qm
  • ExitLag/translations/qt_de.qm
  • ExitLag/translations/qt_en.qm
  • ExitLag/translations/qt_es.qm
  • ExitLag/translations/qt_fi.qm
  • ExitLag/translations/qt_fr.qm
  • ExitLag/translations/qt_gd.qm
  • ExitLag/translations/qt_he.qm
  • ExitLag/translations/qt_hu.qm
  • ExitLag/translations/qt_it.qm
  • ExitLag/translations/qt_ja.qm
  • ExitLag/translations/qt_ko.qm
  • ExitLag/translations/qt_lv.qm
  • ExitLag/translations/qt_pl.qm
  • ExitLag/translations/qt_ru.qm
  • ExitLag/translations/qt_sk.qm
  • ExitLag/translations/qt_tr.qm
  • ExitLag/translations/qt_uk.qm
  • ExitLag/translations/qt_zh_TW.qm
  • ExitLag/ucrtbase.dll
    .dll windows:10 windows x86 arch:x86

    7a86ba02a97907fb532ad47d5e59b822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/unins000.dat
  • ExitLag/unins000.exe
    .exe windows:6 windows x86 arch:x86

    8507116e3d0e7e02e36e7dc5b8aa1af8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/unins000.msg
  • ExitLag/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    afb84db4b58d412d50b880bd7df139f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExitLag/zip.dll
    .dll windows:6 windows x86 arch:x86

    f0b8586ba476d276a7bac5c069701c92


    Headers

    Imports

    Exports

    Sections

  • ExitLag/zlib1.dll
    .dll windows:6 windows x86 arch:x86

    ab93e46b72d29b4a79c7470b0b55fbb0


    Headers

    Imports

    Exports

    Sections