D:\qci_workspace\root-workspaces\__qci-pipeline-10989746-1\Basic\Output\BinFinal\QMSoftMgrUpdate\QMSoftMgrUpdate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a291559fcc5f2c199a4f19a70bfb5a3173fc403e5d12b73ac8620bd6bcbee8d6.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a291559fcc5f2c199a4f19a70bfb5a3173fc403e5d12b73ac8620bd6bcbee8d6.dll
Resource
win10v2004-20240802-en
General
-
Target
a291559fcc5f2c199a4f19a70bfb5a3173fc403e5d12b73ac8620bd6bcbee8d6
-
Size
385KB
-
MD5
f8f0692f6a02ab1c82ac697fa92ce6e4
-
SHA1
d9370692b364a7fbefda6f6ac4ccf4350df7b7db
-
SHA256
a291559fcc5f2c199a4f19a70bfb5a3173fc403e5d12b73ac8620bd6bcbee8d6
-
SHA512
00788ff158fc290af44bc92bbbc0ae1d1295c3845f5acabb7eef4ff881a948e628804f83606277c0d3a57aeff6578ea12dbf4f4368dbf641f7b65d4ebd92b54b
-
SSDEEP
6144:HlTDIDr1I1HuiKZZlM1wVJAc5R8gqsZ6vSi5kMhPK0ZFA2:HlGr1+OiP1wVJA4R83
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a291559fcc5f2c199a4f19a70bfb5a3173fc403e5d12b73ac8620bd6bcbee8d6
Files
-
a291559fcc5f2c199a4f19a70bfb5a3173fc403e5d12b73ac8620bd6bcbee8d6.dll windows:6 windows x86 arch:x86
77f10fd902229836c5d1041a10139f60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ws2_32
freeaddrinfo
htonl
recv
connect
socket
send
getaddrinfo
select
closesocket
ntohs
ioctlsocket
ntohl
inet_ntop
htons
WSAGetLastError
kernel32
DeleteFileW
CloseHandle
MoveFileExW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
SwitchToThread
GetCurrentProcess
WaitForMultipleObjects
InitializeCriticalSection
WaitForSingleObject
DuplicateHandle
CreateEventW
SetEvent
ResetEvent
DeleteCriticalSection
WideCharToMultiByte
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
CopyFileW
ReadFile
SetLastError
SetFilePointer
SetEndOfFile
Sleep
CreateDirectoryW
SizeofResource
HeapFree
GetTempPathW
InitializeCriticalSectionEx
HeapSize
MultiByteToWideChar
LockResource
HeapReAlloc
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
HeapDestroy
GetProcessHeap
GetFileSize
SetFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryW
GetFileType
DosDateTimeToFileTime
UnmapViewOfFile
GetTickCount64
MapViewOfFile
ResumeThread
GetExitCodeThread
lstrlenW
GetModuleHandleW
OpenProcess
GetCurrentProcessId
TerminateProcess
lstrcmpiW
GetModuleHandleExW
QueryPerformanceCounter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
UnhandledExceptionFilter
GetVersionExW
GetACP
VirtualQuery
MapViewOfFileEx
GetSystemDefaultLangID
GetNativeSystemInfo
GetSystemPowerStatus
LoadLibraryA
GetFileAttributesW
CreateFileW
LeaveCriticalSection
WriteFile
EnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetLastError
CreateFileMappingW
OutputDebugStringW
user32
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
advapi32
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegSetKeySecurity
RegGetKeySecurity
RegNotifyChangeKeyValue
RegEnumValueW
RegFlushKey
RegDeleteValueW
RegDeleteKeyW
shell32
SHCreateDirectoryExW
ole32
CoInitialize
CoUninitialize
shlwapi
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
PathCombineW
SHGetValueW
msvcp140
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
wininet
InternetCrackUrlW
HttpOpenRequestW
InternetOpenW
InternetReadFileExA
HttpSendRequestW
InternetConnectW
InternetSetStatusCallbackW
HttpQueryInfoW
InternetCloseHandle
psapi
GetModuleBaseNameW
GetModuleFileNameExW
GetProcessMemoryInfo
EnumProcesses
EnumProcessModules
vcruntime140
__std_terminate
__current_exception_context
__current_exception
_except_handler4_common
memset
memmove
__std_type_info_destroy_list
_CxxThrowException
wcschr
wcsstr
__std_exception_destroy
__std_exception_copy
memcpy
wcsrchr
memchr
__CxxFrameHandler3
_purecall
api-ms-win-crt-stdio-l1-1-0
ungetc
_wfopen
fread
fopen_s
__stdio_common_vswprintf_p
_write
_close
_sopen_s
fwrite
fseek
__stdio_common_vswscanf
_read
fclose
__stdio_common_vfprintf
_wfopen_s
__acrt_iob_func
__stdio_common_vswprintf_s
_lseek
fgetc
fflush
ftell
ferror
api-ms-win-crt-heap-l1-1-0
calloc
realloc
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
exit
_seh_filter_dll
_set_invalid_parameter_handler
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_beginthreadex
_cexit
_invalid_parameter_noinfo_noreturn
_initterm
_invalid_parameter_noinfo
_errno
_initterm_e
terminate
api-ms-win-crt-string-l1-1-0
wcscat_s
wmemcpy_s
wcsncmp
_wcsnicmp
wcscpy_s
towlower
_strnicmp
wcsncpy_s
strncpy
_wcsicmp
strncpy_s
towupper
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-convert-l1-1-0
atoi
_itow_s
_wtoi
_itow
wcstol
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-filesystem-l1-1-0
_wsplitpath_s
Exports
Exports
DoForceQuery
DoInitCheck
DoPatch
DoQuery
InitUpdateInfo
InternalInit
InternalUninit
SetReportGroup
SetUpdateFileTable
SetUpdateParam
UninitUpdateInfo
Sections
.text Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ