General

  • Target

    613e13215b449ff2e6a915739b5d1300N.exe

  • Size

    975KB

  • MD5

    613e13215b449ff2e6a915739b5d1300

  • SHA1

    7fffebe37752871cd1e62983ce314c44ac6e002d

  • SHA256

    f87c3fb760f8588259ba0c4783748ceaa8d89fda214591ab34ef4c44037195f2

  • SHA512

    35dbecaa16acdbb9c7b2938055429eb0c504c329b60f3404b1d47c71939c51c35b98ff6a98513b876cd7027f570b03981b9b3a03d39873c28bee59ffcd098428

  • SSDEEP

    12288:As2YzonW1usvqQtSb5RIvL6r17mBbVmg/hUx0zsvfqj41:AsAsSYSGLs17kIgZzAk41

Score
3/10

Malware Config

Signatures

  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 613e13215b449ff2e6a915739b5d1300N.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $_25_/Qt5ActiveQtServerProject.ico
  • $_25_/Qt5ActiveQtServerProject.vsdir
  • $_25_/Qt5Class.ico
  • $_25_/Qt5Class.vsdir
  • $_25_/Qt5ConsoleProject.ico
  • $_25_/Qt5ConsoleProject.vsdir
  • $_25_/Qt5DesignerPluginProject.ico
  • $_25_/Qt5DesignerPluginProject.vsdir
  • $_25_/Qt5GuiClass.ico
  • $_25_/Qt5GuiClass.vsdir
  • $_25_/Qt5GuiProject.ico
  • $_25_/Qt5GuiProject.vsdir
  • $_25_/Qt5LibProject.ico
  • $_25_/Qt5LibProject.vsdir
  • $_25_/Qt5WinCELibProject.ico
  • $_25_/Qt5WinCELibProject.vsdir
  • $_25_/Qt5WinCEProject.ico
  • $_25_/Qt5WinCEProject.vsdir
  • $_26_/Qt5ActiveQtServerProject/1033/styles.css
  • $_26_/Qt5ActiveQtServerProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5ActiveQtServerProject/html/1031/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5ActiveQtServerProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5ActiveQtServerProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5ActiveQtServerProject/html/1033/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5ActiveQtServerProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5ActiveQtServerProject/images/Qt5ActiveQtServerProject.jpg
    .jpg
  • $_26_/Qt5ActiveQtServerProject/scripts/1033/default.js
    .js
  • $_26_/Qt5ActiveQtServerProject/templates/1033/server.def
  • $_26_/Qt5ActiveQtServerProject/templates/1033/server.ico
  • $_26_/Qt5ActiveQtServerProject/templates/1033/server.rc
  • $_26_/Qt5ActiveQtServerProject/templates/1033/source.cpp
  • $_26_/Qt5ActiveQtServerProject/templates/1033/source.h
  • $_26_/Qt5ActiveQtServerProject/templates/1033/stdafx.cpp
  • $_26_/Qt5ActiveQtServerProject/templates/1033/stdafx.h
  • $_26_/Qt5ActiveQtServerProject/templates/1033/widget.ui
  • $_26_/Qt5Class/1033/styles.css
  • $_26_/Qt5Class/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5Class/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5Class/images/Qt5Class.gif
  • $_26_/Qt5Class/scripts/1033/default.js
    .js
  • $_26_/Qt5Class/templates/1033/class.cpp
  • $_26_/Qt5Class/templates/1033/class.h
  • $_26_/Qt5ConsoleProject/1033/styles.css
  • $_26_/Qt5ConsoleProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5ConsoleProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5ConsoleProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5ConsoleProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5ConsoleProject/images/Qt5ConsoleProject.jpg
    .jpg
  • $_26_/Qt5ConsoleProject/scripts/1033/default.js
    .js
  • $_26_/Qt5ConsoleProject/templates/1033/main.cpp
  • $_26_/Qt5ConsoleProject/templates/1033/stdafx.cpp
  • $_26_/Qt5DesignerPluginProject/1033/styles.css
  • $_26_/Qt5DesignerPluginProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5DesignerPluginProject/html/1031/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5DesignerPluginProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5DesignerPluginProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5DesignerPluginProject/html/1033/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5DesignerPluginProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5DesignerPluginProject/images/Qt5DesignerPluginProject.jpg
    .jpg
  • $_26_/Qt5DesignerPluginProject/scripts/1033/default.js
    .js
  • $_26_/Qt5DesignerPluginProject/templates/1033/mywidget.cpp
  • $_26_/Qt5DesignerPluginProject/templates/1033/mywidget.h
  • $_26_/Qt5DesignerPluginProject/templates/1033/plugin.cpp
  • $_26_/Qt5DesignerPluginProject/templates/1033/plugin.h
  • $_26_/Qt5DesignerPluginProject/templates/1033/plugin.json
  • $_26_/Qt5DesignerPluginProject/templates/1033/stdafx.cpp
  • $_26_/Qt5DesignerPluginProject/templates/1033/stdafx.h
  • $_26_/Qt5GuiClass/1033/styles.css
  • $_26_/Qt5GuiClass/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5GuiClass/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5GuiClass/images/Qt5GuiClass.gif
  • $_26_/Qt5GuiClass/scripts/1033/default.js
    .js
  • $_26_/Qt5GuiClass/templates/1033/class.cpp
  • $_26_/Qt5GuiClass/templates/1033/class.h
  • $_26_/Qt5GuiClass/templates/1033/form.ui
  • $_26_/Qt5GuiClass/templates/1033/mi_class.cpp
  • $_26_/Qt5GuiClass/templates/1033/mi_class.h
  • $_26_/Qt5GuiClass/templates/1033/mp_class.cpp
  • $_26_/Qt5GuiClass/templates/1033/mp_class.h
  • $_26_/Qt5GuiProject/1033/styles.css
  • $_26_/Qt5GuiProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5GuiProject/html/1031/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5GuiProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5GuiProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5GuiProject/html/1033/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5GuiProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5GuiProject/images/Qt5GuiProject.jpg
    .jpg
  • $_26_/Qt5GuiProject/scripts/1033/default.js
    .js
  • $_26_/Qt5GuiProject/templates/1033/main.cpp
  • $_26_/Qt5GuiProject/templates/1033/mywidget.cpp
  • $_26_/Qt5GuiProject/templates/1033/mywidget.h
  • $_26_/Qt5GuiProject/templates/1033/stdafx.cpp
  • $_26_/Qt5GuiProject/templates/1033/stdafx.h
  • $_26_/Qt5GuiProject/templates/1033/widget.ui
  • $_26_/Qt5GuiProject/templates/1033/winapp.ico
  • $_26_/Qt5LibProject/1033/styles.css
  • $_26_/Qt5LibProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5LibProject/html/1031/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5LibProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5LibProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5LibProject/html/1033/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5LibProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5LibProject/images/Qt5LibProject.jpg
    .jpg
  • $_26_/Qt5LibProject/scripts/1033/default.js
    .js
  • $_26_/Qt5LibProject/templates/1033/defines.h
  • $_26_/Qt5LibProject/templates/1033/header.h
  • $_26_/Qt5LibProject/templates/1033/source.cpp
  • $_26_/Qt5LibProject/templates/1033/stdafx.cpp
  • $_26_/Qt5WinCELibProject/1033/styles.css
  • $_26_/Qt5WinCELibProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5WinCELibProject/html/1031/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5WinCELibProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5WinCELibProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5WinCELibProject/html/1033/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5WinCELibProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5WinCELibProject/images/Qt5WinCELibProject.jpg
    .jpg
  • $_26_/Qt5WinCELibProject/scripts/1033/default.js
    .js
  • $_26_/Qt5WinCELibProject/templates/1033/defines.h
  • $_26_/Qt5WinCELibProject/templates/1033/header.h
  • $_26_/Qt5WinCELibProject/templates/1033/source.cpp
  • $_26_/Qt5WinCELibProject/templates/1033/stdafx.cpp
  • $_26_/Qt5WinCEProject/1033/styles.css
  • $_26_/Qt5WinCEProject/html/1031/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5WinCEProject/html/1031/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5WinCEProject/html/1031/default.htm
    .html .js polyglot
  • $_26_/Qt5WinCEProject/html/1033/Page_2.htm
    .html .js polyglot
  • $_26_/Qt5WinCEProject/html/1033/Page_3.htm
    .html .js polyglot
  • $_26_/Qt5WinCEProject/html/1033/default.htm
    .html .js polyglot
  • $_26_/Qt5WinCEProject/images/Qt5WinCEProject.jpg
    .jpg
  • $_26_/Qt5WinCEProject/scripts/1033/default.js
    .js
  • $_26_/Qt5WinCEProject/templates/1033/main.cpp
  • $_26_/Qt5WinCEProject/templates/1033/mywidget.cpp
  • $_26_/Qt5WinCEProject/templates/1033/mywidget.h
  • $_26_/Qt5WinCEProject/templates/1033/stdafx.cpp
  • $_26_/Qt5WinCEProject/templates/1033/stdafx.h
  • $_26_/Qt5WinCEProject/templates/1033/widget.ui
  • $_26_/Qt5WinCEProject/templates/1033/winapp.ico
  • $_27_/newQrcFile.ico
  • $_27_/newQrcFile.qrc
  • $_27_/newUiDialogButtonsBottom.ico
  • $_27_/newUiDialogButtonsBottom.ui
  • $_27_/newUiDialogButtonsRight.ico
  • $_27_/newUiDialogButtonsRight.ui
  • $_27_/newUiMainWindow.ico
  • $_27_/newUiMainWindow.ui
  • $_27_/newUiWidget.ico
  • $_27_/newUiWidget.ui
  • $_27_/qrcFiles.vsdir
  • $_27_/uiFiles.vsdir
  • $_5_/10.0/Qt5ProjectEngineLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/10.0/Qt5ProjectLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/10.0/Qt5VSAddin.AddIn
    .xml
  • $_5_/10.0/Qt5VSAddin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/10.0/de/Qt5ProjectLib.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/10.0/de/Qt5VSAddin.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/10.0/zh-cn/Qt5VSAddin.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/11.0/Qt5ProjectEngineLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/11.0/Qt5ProjectLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/11.0/Qt5VSAddin.AddIn
    .xml
  • $_5_/11.0/Qt5VSAddin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/11.0/de/Qt5ProjectLib.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/11.0/de/Qt5VSAddin.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/11.0/zh-cn/Qt5VSAddin.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/9.0/Qt5ProjectEngineLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/9.0/Qt5ProjectLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/9.0/Qt5VSAddin.AddIn
    .xml
  • $_5_/9.0/Qt5VSAddin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/9.0/de/Qt5ProjectLib.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/9.0/de/Qt5VSAddin.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/9.0/zh-cn/Qt5VSAddin.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_5_/Changes-1.2.1
  • $_5_/Qt5Core.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $_5_/imageformats/qgif.dll
    .dll windows:5 windows x86 arch:x86

    eacc7e3b4ac37c6bb2a7d73bf8678f67


    Headers

    Imports

    Exports

    Sections

  • $_5_/imageformats/qico.dll
    .dll windows:5 windows x86 arch:x86

    e83db9130e73221ae70f1cb3afd74f3e


    Headers

    Imports

    Exports

    Sections

  • $_5_/imageformats/qjpeg.dll
    .dll windows:5 windows x86 arch:x86

    4e8410586ebdcce7771b99a6a0a8d14b


    Headers

    Imports

    Exports

    Sections

  • $_5_/imageformats/qsvg.dll
    .dll windows:5 windows x86 arch:x86

    687733feac64f3cdca3dbfa1a5481108


    Headers

    Imports

    Exports

    Sections

  • $_5_/q5rceditor.exe
    .exe windows:5 windows x86 arch:x86

    ae1c668fcdd04952cefa3f89048217bd


    Headers

    Imports

    Sections

  • $_5_/qmakefilereader.exe
    .exe windows:5 windows x86 arch:x86

    3db16b7cc3e405c6e750fe588278fd53


    Headers

    Imports

    Sections