06db71cf5048d539c508dd60d24aff10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

06db71cf5048d539c508dd60d24aff10N.exe
Size

3.4MB
MD5

06db71cf5048d539c508dd60d24aff10
SHA1

f24e5896ae3489e064015fdfffccb3d508e0f87c
SHA256

e4be53ff39eb054039ad81d8bc08109ea92ccc995312b82f68d7fcdf6a61d3ad
SHA512

12795a46e5ffb9c803ae8672ddf31111ca596e786eea04e22333ee254f5c699960d445a9b1db557f5aa9a4f7f5c44e35b8d367cb4c1aa8fcf87251f950cd7ed4
SSDEEP

49152:NsvjCCcS+KtPedigSF9osCUj0np1EfQemU00iyTt1NJUdOuWcJ/SgAsLZ4/t3be5:rmP2ipFisLmEft7iyB1jXCTgt3i5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06db71cf5048d539c508dd60d24aff10N.exe

Files

06db71cf5048d539c508dd60d24aff10N.exe
.dll windows:5 windows x86 arch:x86

3a50b055ed88d2f673aa41876d9c75f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

qt5core

_Z21qRegisterResourceDataiPKhS0_S0_

qt5gui

_ZN11QTextCursor12movePositionENS_13MoveOperationENS_8MoveModeEi

qt5network

_ZN13QNetworkReply16staticMetaObjectE

qt5widgets

_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE

libgcc_s_dw2-1

_Unwind_Resume

kernel32

DeleteCriticalSection
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

_amsg_exit

libwinpthread-1

pthread_mutex_destroy

user32

MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv

Exports

Exports

DA_SLA_Challenge
DA_SLA_Challenge_END
SLA_Challenge
SLA_ChallengeEx
SLA_Challenge_END
SLA_Challenge_End
SLA_Feature_Config
can_flash
free_user_info
get_user_info

Sections

.text
Size: - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a50b055ed88d2f673aa41876d9c75f5

Headers

File Characteristics

Imports

qt5core

qt5gui

qt5network

qt5widgets

libgcc_s_dw2-1

kernel32

msvcrt

libwinpthread-1

user32

libstdc++-6

Exports

Exports

Sections

.text Size: - Virtual size: 77KB

.data Size: - Virtual size: 120B

.rdata Size: - Virtual size: 92KB

.eh_fram Size: - Virtual size: 10KB

.bss Size: - Virtual size: 1008B

.edata Size: - Virtual size: 320B

.idata Size: - Virtual size: 18KB

.CRT Size: - Virtual size: 44B

.tls Size: - Virtual size: 8B

.vmp0 Size: - Virtual size: 1.6MB

.vmp1 Size: 3.4MB - Virtual size: 3.4MB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 77KB

.data
Size: - Virtual size: 120B

.rdata
Size: - Virtual size: 92KB

.eh_fram
Size: - Virtual size: 10KB

.bss
Size: - Virtual size: 1008B

.edata
Size: - Virtual size: 320B

.idata
Size: - Virtual size: 18KB

.CRT
Size: - Virtual size: 44B

.tls
Size: - Virtual size: 8B

.vmp0
Size: - Virtual size: 1.6MB

.vmp1
Size: 3.4MB - Virtual size: 3.4MB

.reloc
Size: 1KB - Virtual size: 1KB