General

  • Target

    7ee94ce3cda6ff1897b62d8859bea2d419c9c5d1226ef5bbb0c07af9e7a74269

  • Size

    9.1MB

  • MD5

    eb9ce979aabdcff34c7aeb088d45da84

  • SHA1

    c91e401725d622680980d58f7b7590da76dc3cad

  • SHA256

    7ee94ce3cda6ff1897b62d8859bea2d419c9c5d1226ef5bbb0c07af9e7a74269

  • SHA512

    4bd10555141b3538862b2a8d83307ef2c091d573cdd6437d330918a5b355b2c61fd2860226b9f05bc8e4c2a1c57c7914a5a986ff7b9d33bb7970a16982e18046

  • SSDEEP

    196608:wwcGQ5oLjWCdM5oOcE3yRn8Y53igJnvSmyjhmmgFFDVklZhtkvoMmU3f8/uTNTfn:QadQqE3ynd53igMPjhmmgVe0Ui1rfz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ee94ce3cda6ff1897b62d8859bea2d419c9c5d1226ef5bbb0c07af9e7a74269
    .zip
  • BQB_20230531/BQB.exe
    .exe windows:5 windows x86 arch:x86

    7af2fe87a3ab930007d141d21c36ceda


    Headers

    Imports

    Sections

  • BQB_20230531/PyQt4.QtCore.pyd
    .dll windows:5 windows x86 arch:x86

    bc383cd5f5262bf05c167cabe4eaffb8


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/PyQt4.QtGui.pyd
    .dll windows:5 windows x86 arch:x86

    99fddfcb50c3316c21c5b8137a08367b


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    8571f7b8f5a28e7c7b61ec9fa7d59148


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    6138caf066cd13b10013026c54f409a7


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/_ctypes.pyd
    .dll windows:5 windows x86 arch:x86

    c19be32076c370335d8effffc01f50c4


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/_hashlib.pyd
    .dll windows:5 windows x86 arch:x86

    06cbd8539f0a620b0721a84ce970a345


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/_socket.pyd
    .dll .js windows:5 windows x86 arch:x86 polyglot

    2b085949913e52e33af8d84283d16350


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/_ssl.pyd
    .dll windows:5 windows x86 arch:x86

    532dd7cb763e7bebe863808512fe3ffc


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/bz2.pyd
    .dll windows:5 windows x86 arch:x86

    3d43673132ee26f73d680d2fcd17d337


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/library.zip
    .zip
  • PyQt4/QtCore.pyc
  • PyQt4/QtGui.pyc
  • PyQt4/__init__.pyc
  • Queue.pyc
  • StringIO.pyc
  • UserDict.pyc
  • _LWPCookieJar.pyc
  • _MozillaCookieJar.pyc
  • __future__.pyc
  • _abcoll.pyc
  • _ctypes.pyc
  • _hashlib.pyc
  • _socket.pyc
  • _ssl.pyc
  • _strptime.pyc
  • _threading_local.pyc
  • _weakrefset.pyc
  • abc.pyc
  • api/__init__.pyc
  • api/fe/__init__.pyc
  • api/fe/fe_def.pyc
  • api/hci/__init__.pyc
  • api/hci/hci.pyc
  • api/hci/hci_def.pyc
  • argparse.pyc
  • atexit.pyc
  • base64.pyc
  • bdb.pyc
  • bisect.pyc
  • bz2.pyc
  • calendar.pyc
  • cmd.pyc
  • co/__init__.pyc
  • co/wvt_agent.pyc
  • co/wvt_agent_bla.pyc
  • co/wvt_agent_fts.pyc
  • co/wvt_env.pyc
  • co/wvt_evt_mailbox.pyc
  • co/wvt_exc.pyc
  • co/wvt_global.pyc
  • co/wvt_hdr.pyc
  • co/wvt_log.pyc
  • co/wvt_types.pyc
  • co/wvt_util.pyc
  • codecs.pyc
  • collections.pyc
  • colorama/__init__.pyc
  • colorama/ansi.pyc
  • colorama/ansitowin32.pyc
  • colorama/initialise.pyc
  • colorama/win32.pyc
  • colorama/winterm.pyc
  • cookielib.pyc
  • copy.pyc
  • copy_reg.pyc
  • ctypes/__init__.pyc
  • ctypes/_endian.pyc
  • ctypes/macholib/__init__.pyc
  • ctypes/macholib/dyld.pyc
  • ctypes/macholib/dylib.pyc
  • ctypes/macholib/framework.pyc
  • ctypes/util.pyc
  • ctypes/wintypes.pyc
  • dev/__init__.pyc
  • dev/wvt_ble_peer.pyc
  • dev/wvt_ble_svc.pyc
  • dev/wvt_btdm_sp.pyc
  • difflib.pyc
  • dircache.pyc
  • dis.pyc
  • distutils/__init__.pyc
  • distutils/errors.pyc
  • distutils/log.pyc
  • distutils/spawn.pyc
  • distutils/sysconfig.pyc
  • distutils/text_file.pyc
  • doctest.pyc
  • dummy_thread.pyc
  • dummy_threading.pyc
  • email/__init__.pyc
  • email/_parseaddr.pyc
  • email/base64mime.pyc
  • email/charset.pyc
  • email/encoders.pyc
  • email/errors.pyc
  • email/feedparser.pyc
  • email/generator.pyc
  • email/header.pyc
  • email/iterators.pyc
  • email/message.pyc
  • email/mime/__init__.pyc
  • email/parser.pyc
  • email/quoprimime.pyc
  • email/utils.pyc
  • encodings/__init__.pyc
  • encodings/aliases.pyc
  • encodings/ascii.pyc
  • encodings/base64_codec.pyc
  • encodings/big5.pyc
  • encodings/big5hkscs.pyc
  • encodings/bz2_codec.pyc
  • encodings/charmap.pyc
  • encodings/cp037.pyc
  • encodings/cp1006.pyc
  • encodings/cp1026.pyc
  • encodings/cp1140.pyc
  • encodings/cp1250.pyc
  • encodings/cp1251.pyc
  • encodings/cp1252.pyc
  • encodings/cp1253.pyc
  • encodings/cp1254.pyc
  • encodings/cp1255.pyc
  • encodings/cp1256.pyc
  • encodings/cp1257.pyc
  • encodings/cp1258.pyc
  • encodings/cp424.pyc
  • encodings/cp437.pyc
  • encodings/cp500.pyc
  • encodings/cp720.pyc
  • encodings/cp737.pyc
  • encodings/cp775.pyc
  • encodings/cp850.pyc
  • encodings/cp852.pyc
  • encodings/cp855.pyc
  • encodings/cp856.pyc
  • encodings/cp857.pyc
  • encodings/cp858.pyc
  • encodings/cp860.pyc
  • encodings/cp861.pyc
  • encodings/cp862.pyc
  • encodings/cp863.pyc
  • encodings/cp864.pyc
  • encodings/cp865.pyc
  • encodings/cp866.pyc
  • encodings/cp869.pyc
  • encodings/cp874.pyc
  • encodings/cp875.pyc
  • encodings/cp932.pyc
  • encodings/cp949.pyc
  • encodings/cp950.pyc
  • encodings/euc_jis_2004.pyc
  • encodings/euc_jisx0213.pyc
  • encodings/euc_jp.pyc
  • encodings/euc_kr.pyc
  • encodings/gb18030.pyc
  • encodings/gb2312.pyc
  • encodings/gbk.pyc
  • encodings/hex_codec.pyc
  • encodings/hp_roman8.pyc
  • encodings/hz.pyc
  • encodings/idna.pyc
  • encodings/iso2022_jp.pyc
  • encodings/iso2022_jp_1.pyc
  • encodings/iso2022_jp_2.pyc
  • encodings/iso2022_jp_2004.pyc
  • encodings/iso2022_jp_3.pyc
  • encodings/iso2022_jp_ext.pyc
  • encodings/iso2022_kr.pyc
  • encodings/iso8859_1.pyc
  • encodings/iso8859_10.pyc
  • encodings/iso8859_11.pyc
  • encodings/iso8859_13.pyc
  • encodings/iso8859_14.pyc
  • encodings/iso8859_15.pyc
  • encodings/iso8859_16.pyc
  • encodings/iso8859_2.pyc
  • encodings/iso8859_3.pyc
  • encodings/iso8859_4.pyc
  • encodings/iso8859_5.pyc
  • encodings/iso8859_6.pyc
  • encodings/iso8859_7.pyc
  • encodings/iso8859_8.pyc
  • encodings/iso8859_9.pyc
  • encodings/johab.pyc
  • encodings/koi8_r.pyc
  • encodings/koi8_u.pyc
  • encodings/latin_1.pyc
  • encodings/mac_arabic.pyc
  • encodings/mac_centeuro.pyc
  • encodings/mac_croatian.pyc
  • encodings/mac_cyrillic.pyc
  • encodings/mac_farsi.pyc
  • encodings/mac_greek.pyc
  • encodings/mac_iceland.pyc
  • encodings/mac_latin2.pyc
  • encodings/mac_roman.pyc
  • encodings/mac_romanian.pyc
  • encodings/mac_turkish.pyc
  • encodings/mbcs.pyc
  • encodings/palmos.pyc
  • encodings/ptcp154.pyc
  • encodings/punycode.pyc
  • encodings/quopri_codec.pyc
  • encodings/raw_unicode_escape.pyc
  • encodings/rot_13.pyc
  • encodings/shift_jis.pyc
  • encodings/shift_jis_2004.pyc
  • encodings/shift_jisx0213.pyc
  • encodings/string_escape.pyc
  • encodings/tis_620.pyc
  • encodings/undefined.pyc
  • encodings/unicode_escape.pyc
  • encodings/unicode_internal.pyc
  • encodings/utf_16.pyc
  • encodings/utf_16_be.pyc
  • encodings/utf_16_le.pyc
  • encodings/utf_32.pyc
  • encodings/utf_32_be.pyc
  • encodings/utf_32_le.pyc
  • encodings/utf_7.pyc
  • encodings/utf_8.pyc
  • encodings/utf_8_sig.pyc
  • encodings/uu_codec.pyc
  • encodings/zlib_codec.pyc
  • fnmatch.pyc
  • ftplib.pyc
  • functools.pyc
  • genericpath.pyc
  • getopt.pyc
  • getpass.pyc
  • gettext.pyc
  • glob.pyc
  • gui/__init__.pyc
  • gui/tabs/__init__.pyc
  • gui/tabs/tab_sp_dev_bletest.pyc
  • gui/tabs/tab_sp_dev_bletest_v2.pyc
  • gui/tabs/tab_sp_dev_bletest_v3.pyc
  • gui/tabs/tab_sp_dev_bletest_v4.pyc
  • gui/tabs/tab_sp_dev_nosigtest.pyc
  • gui/tabs/tab_sp_dev_setting.pyc
  • gui/tabs/tab_sp_dev_sigtest.pyc
  • gui/tabs/tab_sp_dev_vcosigtest.pyc
  • gui/widgets/__init__.pyc
  • gui/widgets/widget_log.pyc
  • gui/wvt_dlg_about.pyc
  • gui/wvt_dlg_add_dev_plf.pyc
  • gui/wvt_dlg_appmode.pyc
  • gui/wvt_dlg_cfg.pyc
  • gui/wvt_dlg_dev.pyc
  • gui/wvt_dlg_le_updpara.pyc
  • gui/wvt_dlg_lkey_resp.pyc
  • gui/wvt_dlg_p2p_tc.pyc
  • gui/wvt_dlg_pin_resp.pyc
  • gui/wvt_dlg_spiocapa_resp.pyc
  • gui/wvt_dlg_spnumcomp_resp.pyc
  • gui/wvt_dlg_spoob_resp.pyc
  • gui/wvt_dlg_sppasskey_resp.pyc
  • gui/wvt_globals.pyc
  • gui/wvt_gui_utils.pyc
  • gui/wvt_mainwin.pyc
  • gui/wvt_thread.pyc
  • gzip.pyc
  • hashlib.pyc
  • heapq.pyc
  • httplib.pyc
  • importlib/__init__.pyc
  • inspect.pyc
  • io.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • logging/__init__.pyc
  • mimetools.pyc
  • mimetypes.pyc
  • ntpath.pyc
  • nturl2path.pyc
  • opcode.pyc
  • optparse.pyc
  • os.pyc
  • os2emxpath.pyc
  • pdb.pyc
  • pickle.pyc
  • platform.pyc
  • plistlib.pyc
  • posixpath.pyc
  • pprint.pyc
  • py_compile.pyc
  • pyexpat.pyc
  • quopri.pyc
  • random.pyc
  • re.pyc
  • reg/__init__.pyc
  • reg/reg_bj.pyc
  • repr.pyc
  • rfc822.pyc
  • select.pyc
  • serial/__init__.pyc
  • serial/serialcli.pyc
  • serial/serialjava.pyc
  • serial/serialposix.pyc
  • serial/serialutil.pyc
  • serial/serialwin32.pyc
  • serial/tools/__init__.pyc
  • serial/tools/list_ports.pyc
  • serial/tools/list_ports_common.pyc
  • serial/tools/list_ports_linux.pyc
  • serial/tools/list_ports_osx.pyc
  • serial/tools/list_ports_posix.pyc
  • serial/tools/list_ports_windows.pyc
  • serial/win32.pyc
  • sets.pyc
  • shlex.pyc
  • shutil.pyc
  • sip.pyc
  • socket.pyc
  • sre.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • ssl.pyc
  • stat.pyc
  • string.pyc
  • stringprep.pyc
  • struct.pyc
  • subprocess.pyc
  • tarfile.pyc
  • tempfile.pyc
  • textwrap.pyc
  • threading.pyc
  • token.pyc
  • tokenize.pyc
  • traceback.pyc
  • types.pyc
  • unicodedata.pyc
  • unittest/__init__.pyc
  • unittest/case.pyc
  • unittest/loader.pyc
  • unittest/main.pyc
  • unittest/result.pyc
  • unittest/runner.pyc
  • unittest/signals.pyc
  • unittest/suite.pyc
  • unittest/util.pyc
  • urllib.pyc
  • urllib2.pyc
  • urlparse.pyc
  • usb/__init__.pyc
  • usb/_debug.pyc
  • usb/_interop.pyc
  • usb/backend/__init__.pyc
  • usb/backend/libusb01.pyc
  • usb/backend/libusb10.pyc
  • usb/backend/openusb.pyc
  • usb/control.pyc
  • usb/core.pyc
  • usb/legacy.pyc
  • usb/util.pyc
  • uu.pyc
  • warnings.pyc
  • weakref.pyc
  • win32api.pyc
  • win32con.pyc
  • win32pipe.pyc
  • wvt.pyc
  • xml/__init__.pyc
  • xml/dom/NodeFilter.pyc
  • xml/dom/__init__.pyc
  • xml/dom/domreg.pyc
  • xml/dom/expatbuilder.pyc
  • xml/dom/minicompat.pyc
  • xml/dom/minidom.pyc
  • xml/dom/pulldom.pyc
  • xml/dom/xmlbuilder.pyc
  • xml/parsers/__init__.pyc
  • xml/parsers/expat.pyc
  • xml/sax/__init__.pyc
  • xml/sax/_exceptions.pyc
  • xml/sax/expatreader.pyc
  • xml/sax/handler.pyc
  • xml/sax/saxutils.pyc
  • xml/sax/xmlreader.pyc
  • zipfile.pyc
  • BQB_20230531/pyexpat.pyd
    .dll windows:5 windows x86 arch:x86

    276838b6281851b192c7f267111a639c


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/python27.dll
    .dll windows:5 windows x86 arch:x86

    ab21a3efb5f5aac22c9dca3761b8bbef


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/pywintypes27.dll
    .dll windows:5 windows x86 arch:x86

    65d2f170b5141415ae2f3c82705ce2ed


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/select.pyd
    .dll windows:5 windows x86 arch:x86

    58d5019e9040f5965e6236d68201553b


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/sip.pyd
    .dll windows:5 windows x86 arch:x86

    65ff6694af14a8c190c1bfc5f2be953b


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/transferdll.dll
    .dll windows:5 windows x86 arch:x86

    0aa3d8907d7a185fcf176f46b0f557b3


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/unicodedata.pyd
    .dll windows:5 windows x86 arch:x86

    74ab33850bba820764dfc717ec03b354


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/win32api.pyd
    .dll windows:5 windows x86 arch:x86

    5f87811dbc0e636dace314ac92be6ba0


    Headers

    Imports

    Exports

    Sections

  • BQB_20230531/win32pipe.pyd
    .dll windows:5 windows x86 arch:x86

    44e082ea9956c3482079579fa8dae562


    Headers

    Imports

    Exports

    Sections