a52c6207213bedf3f8d2debd861bd7b0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a52c6207213bedf3f8d2debd861bd7b0N.exe
Size

14KB
MD5

a52c6207213bedf3f8d2debd861bd7b0
SHA1

586787bed5baf05cfbf0d51a1c7f90d3c156b74e
SHA256

2d670f428d88a93e15f378124a54f98da03046a729a6ac275343b56428afde16
SHA512

2eee3a3939cdc48d7a29a72ead2d055a79256d90e19bb8b7f1a8994290d9770d621fbb97620579dcca0604cb1c32fd2987afb28bd2ed57ecb7768809e78a6964
SSDEEP

192:Aar/z2HhAwcLdm853kDUemcNfDYYULRP5jO+ijcsPTYOstqBBdVziJJDhVfoP:AaGHhAXLdJ5hykP5j2jFc6MrzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a52c6207213bedf3f8d2debd861bd7b0N.exe

Files

a52c6207213bedf3f8d2debd861bd7b0N.exe
.dll windows:6 windows x86 arch:x86

5f371b7404838e2b86f07855064d5b5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

qt5core

?exists@QDir@@QBE_NXZ
?mkpath@QDir@@QBE_NABVQString@@@Z
?mkdir@QDir@@QBE_NABVQString@@@Z
??1QDir@@QAE@XZ
??0QDir@@QAE@ABVQString@@@Z
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?arg@QString@@QBE?AV1@HHHVQChar@@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
??0QString@@QAE@$$QAV0@@Z
??4QString@@QAEAAV0@ABV0@@Z
??1QString@@QAE@XZ
??0QString@@QAE@ABV0@@Z
??0QString@@QAE@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_cexit
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv

kernel32

GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
CloseHandle
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
TerminateProcess

Exports

Exports

??0TMSConfig@@AAE@ABVQString@@@Z
??0TMSConfig@@QAE@$$QAV0@@Z
??0TMSConfig@@QAE@ABV0@@Z
??1TMSConfig@@QAE@XZ
??4TMSConfig@@QAEAAV0@$$QAV0@@Z
??4TMSConfig@@QAEAAV0@ABV0@@Z
?getAppName@TMSConfig@@QAE?AVQString@@XZ
?getConfig@TMSConfig@@SAPAV1@ABVQString@@@Z
?getDefAttachmentFolder@TMSConfig@@QAE?AVQString@@XZ
?getDefDBFilePath@TMSConfig@@QAE?AVQString@@XZ
?getDefDBFolder@TMSConfig@@QAE?AVQString@@XZ
?getVersion@TMSConfig@@QAE?AVQString@@XZ

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f371b7404838e2b86f07855064d5b5d

Headers

DLL Characteristics

File Characteristics

Imports

qt5core

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 996B

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 1024B - Virtual size: 756B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 996B

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 1024B - Virtual size: 756B