dc582fc68491fd2395ce8035848b1c60N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

dc582fc68491fd2395ce8035848b1c60N.exe
Size

251KB
MD5

dc582fc68491fd2395ce8035848b1c60
SHA1

ff6f98ce42bc77f1a28ba6023b42f68ab6fdcfe0
SHA256

b0b86fd0fad5a8db65f98bf4ffd3cb148a6b56c796a18cedb1ca08fa9f5f7276
SHA512

8bc8f720050bcab8fde57cc3523472574df4bdd4f8be016687364931d4cff8c7fc894f193ed523d006596348398c66db2055fc6110ad311b9b77d2d4155fea9b
SSDEEP

3072:NvzvO8aSwNHgkG4q24KxsLd2nZPUXFWIw:NvzvOzS6Gt2/AW81WI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc582fc68491fd2395ce8035848b1c60N.exe

Files

dc582fc68491fd2395ce8035848b1c60N.exe
.dll windows:4 windows x64 arch:x64

c2374eb1ea5ed7377d6a814f8ab9b974

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

qt5core

_Z20qResourceFeatureZlibv
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z7qgetenvPKc
_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray6appendEPKc
_ZN10QByteArray6appendEc
_ZN10QByteArrayC1EPKci
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject14normalizedTypeEPKc
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN12QEasingCurveC1ENS_4TypeE
_ZN12QEasingCurveD1Ev
_ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject
_ZN4QUrlC1ERKS_
_ZN4QUrlD1Ev
_ZN6QDebug12putByteArrayEPKcyNS_13Latin1ContentE
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10startTimerEiN2Qt9TimerTypeE
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject5eventEP6QEvent
_ZN7QObject9killTimerEi
_ZN7QObjectD2Ev
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString17fromLatin1_helperEPKci
_ZN7QString18toLocal8Bit_helperEPK5QChari
_ZN8QVariantD1Ev
_ZN9QListData7disposeEPNS_4DataE
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_S3_PKvEi6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayi
_ZNK10QByteArray6isNullEv
_ZNK11QMetaObject10enumeratorEi
_ZNK11QMetaObject17indexOfEnumeratorEPKc
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QMetaObject4castEP7QObject
_ZNK11QMetaObject9classNameEv
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK12QEasingCurve16valueForProgressEd
_ZNK14QMessageLogger7warningEPKcz
_ZNK14QMessageLogger7warningEv
_ZNK4QUrl10isRelativeEv
_ZNK6QLineF6lengthEv
_ZNK7QObject10objectNameEv
_ZNK7QStringeqE13QLatin1String
_ZNK8QVariant11toByteArrayEv
_ZNK8QVariant4typeEv
_ZNK8QVariant5toIntEPb
_ZNK8QVariant8toStringEv
_ZNK9QMetaEnum10keyToValueEPKcPb
_ZNK9QSettings5valueERK7QStringRK8QVariant

qt5gui

_ZN10QMatrix4x49translateEff
_ZN4QPen8setColorERK6QColor
_ZN4QPen8setWidthEi
_ZN4QPenC1Ev
_ZN4QPenD1Ev
_ZN5QFont12setPixelSizeEi
_ZN5QFont17setCapitalizationENS_14CapitalizationE
_ZN5QFont9setFamilyERK7QString
_ZN5QFont9setWeightEi
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN6QColor13setNamedColorE13QLatin1String
_ZN6QColor13setNamedColorERK7QString
_ZN6QColor7setHslFEdddd
_ZN6QColor8fromRgbaEj
_ZN6QColor8setAlphaEi
_ZN6QColor9setAlphaFEd
_ZN6QColorC1EN2Qt11GlobalColorE
_ZN6QColorC1Ej
_ZN6QColoraSERKS_
_ZN6QImage4fillEN2Qt11GlobalColorE
_ZN6QImageC1EiiNS_6FormatE
_ZN6QImageD1Ev
_ZN8QPainter13setRenderHintENS_10RenderHintEb
_ZN8QPainter3endEv
_ZN8QPainter6setPenERK4QPen
_ZN8QPainter7drawArcERK6QRectFii
_ZN8QPainterC1EP12QPaintDevice
_ZN8QPainterD1Ev
_ZN9QFontInfoC1ERK5QFont
_ZN9QFontInfoD1Ev
_ZNK4QPen5widthEv
_ZNK6QColor10lightnessFEv
_ZNK6QColor11saturationFEv
_ZNK6QColor4hueFEv
_ZNK6QColor4rgbaEv
_ZNK6QColor5toHslEv
_ZNK6QColor6alphaFEv
_ZNK6QColor9convertToENS_4SpecE
_ZNK6QColorcv8QVariantEv
_ZNK6QColoreqERKS_
_ZNK9QFontInfo6familyEv

qt5qml

_Z17qmlRegisterModulePKcii
_ZN11QQmlPrivate11qmlregisterENS_16RegistrationTypeEPv
_ZN11QQmlPrivate30qdeclarativeelement_destructorEP7QObject
_ZN19QQmlExtensionPlugin16initializeEngineEP10QQmlEnginePKc
_ZN5QtQml10qmlWarningEPK7QObject
_ZN8QQmlInfoD1Ev
_ZThn16_N19QQmlExtensionPlugin16initializeEngineEP10QQmlEnginePKc

qt5quick

_ZN10QQuickItem10classBeginEv
_ZN10QQuickItem10itemChangeENS_10ItemChangeERKNS_14ItemChangeDataE
_ZN10QQuickItem10setVisibleEb
_ZN10QQuickItem10touchEventEP11QTouchEvent
_ZN10QQuickItem10wheelEventEP11QWheelEvent
_ZN10QQuickItem11qt_metacallEN11QMetaObject4CallEiPPv
_ZN10QQuickItem11qt_metacastEPKc
_ZN10QQuickItem12focusInEventEP11QFocusEvent
_ZN10QQuickItem12updatePolishEv
_ZN10QQuickItem13dragMoveEventEP14QDragMoveEvent
_ZN10QQuickItem13focusOutEventEP11QFocusEvent
_ZN10QQuickItem13keyPressEventEP9QKeyEvent
_ZN10QQuickItem14dragEnterEventEP15QDragEnterEvent
_ZN10QQuickItem14dragLeaveEventEP15QDragLeaveEvent
_ZN10QQuickItem14hoverMoveEventEP11QHoverEvent
_ZN10QQuickItem14mouseMoveEventEP11QMouseEvent
_ZN10QQuickItem15geometryChangedERK6QRectFS2_
_ZN10QQuickItem15hoverEnterEventEP11QHoverEvent
_ZN10QQuickItem15hoverLeaveEventEP11QHoverEvent
_ZN10QQuickItem15keyReleaseEventEP9QKeyEvent
_ZN10QQuickItem15mousePressEventEP11QMouseEvent
_ZN10QQuickItem16inputMethodEventEP17QInputMethodEvent
_ZN10QQuickItem16mouseUngrabEventEv
_ZN10QQuickItem16releaseResourcesEv
_ZN10QQuickItem16staticMetaObjectE
_ZN10QQuickItem16touchUngrabEventEv
_ZN10QQuickItem17componentCompleteEv
_ZN10QQuickItem17mouseReleaseEventEP11QMouseEvent
_ZN10QQuickItem21childMouseEventFilterEPS_P6QEvent
_ZN10QQuickItem21mouseDoubleClickEventEP11QMouseEvent
_ZN10QQuickItem21windowDeactivateEventEv
_ZN10QQuickItem5eventEP6QEvent
_ZN10QQuickItem6updateEv
_ZN10QQuickItem7setClipEb
_ZN10QQuickItem7setFlagENS_4FlagEb
_ZN10QQuickItem9dropEventEP10QDropEvent
_ZN10QQuickItemC2EPS_
_ZN10QQuickItemD2Ev
_ZN14QSGOpacityNode10setOpacityEd
_ZN14QSGOpacityNodeC1Ev
_ZN16QSGTransformNode9setMatrixERK10QMatrix4x4
_ZN16QSGTransformNodeC1Ev
_ZN16QSGTransformNodeD2Ev
_ZN21QQuickDefaultClipNode7setRectERK6QRectF
_ZN7QSGNode15appendChildNodeEPS_
_ZN7QSGNodeC1Ev
_ZNK10QQuickItem11mapFromItemEPKS_RK7QPointF
_ZNK10QQuickItem12boundingRectEv
_ZNK10QQuickItem14implicitHeightEv
_ZNK10QQuickItem15textureProviderEv
_ZNK10QQuickItem16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK10QQuickItem17isTextureProviderEv
_ZNK10QQuickItem5widthEv
_ZNK10QQuickItem6heightEv
_ZNK10QQuickItem6windowEv
_ZNK10QQuickItem8clipRectEv
_ZNK10QQuickItem8containsERK7QPointF
_ZNK10QQuickItem9isEnabledEv
_ZNK10QQuickItem9isVisibleEv
_ZNK12QQuickWindow15createImageNodeEv
_ZNK12QQuickWindow19createRectangleNodeEv
_ZNK12QQuickWindow22createTextureFromImageERK6QImage
_ZNK12QQuickWindow25effectiveDevicePixelRatioEv
_ZNK7QSGNode10childCountEv
_ZNK7QSGNode16isSubtreeBlockedEv
_ZThn16_N10QQuickItem10classBeginEv
_ZThn16_N10QQuickItem17componentCompleteEv

qt5quickcontrols2

_ZN17QQuickStylePlugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN17QQuickStylePlugin11qt_metacastEPKc
_ZN17QQuickStylePlugin16staticMetaObjectE
_ZN17QQuickStylePluginC2EP7QObject
_ZN17QQuickStylePluginD2Ev
_ZN18QQuickAnimatedNode11qt_metacallEN11QMetaObject4CallEiPPv
_ZN18QQuickAnimatedNode11qt_metacastEPKc
_ZN18QQuickAnimatedNode11setDurationEi
_ZN18QQuickAnimatedNode12setLoopCountEi
_ZN18QQuickAnimatedNode14setCurrentTimeEi
_ZN18QQuickAnimatedNode16staticMetaObjectE
_ZN18QQuickAnimatedNode4stopEv
_ZN18QQuickAnimatedNode5startEi
_ZN18QQuickAnimatedNode7restartEv
_ZN18QQuickAnimatedNode7stoppedEv
_ZN18QQuickAnimatedNodeC2EP10QQuickItem
_ZN18QQuickStylePrivate17isDarkSystemThemeEv
_ZN18QQuickStylePrivate8settingsERK7QString
_ZN20QQuickAttachedObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN20QQuickAttachedObject11qt_metacastEPKc
_ZN20QQuickAttachedObject16staticMetaObjectE
_ZN20QQuickAttachedObject4initEv
_ZN20QQuickAttachedObjectC2EP7QObject
_ZN20QQuickAttachedObjectD2Ev
_ZNK17QQuickStylePlugin11resolvedUrlERK7QString
_ZNK18QQuickAnimatedNode10metaObjectEv
_ZNK18QQuickAnimatedNode11currentTimeEv
_ZNK18QQuickAnimatedNode6windowEv
_ZNK18QQuickAnimatedNode8durationEv
_ZNK20QQuickAttachedObject14attachedParentEv
_ZNK20QQuickAttachedObject16attachedChildrenEv
_ZTV18QQuickAnimatedNode

qt5quicktemplates2

_ZN11QQuickTheme7setFontENS_5ScopeERK5QFont
_ZN20QQuickAbstractButton16staticMetaObjectE

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fprintf
free
fwrite
malloc
memcpy
realloc
signal
strcmp
strlen
strncmp
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_guard_acquire
__cxa_guard_release

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2374eb1ea5ed7377d6a814f8ab9b974

Headers

File Characteristics

Imports

qt5core

qt5gui

qt5qml

qt5quick

qt5quickcontrols2

qt5quicktemplates2

kernel32

msvcrt

libstdc++-6

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.data Size: 1024B - Virtual size: 672B

.rdata Size: 169KB - Virtual size: 168KB

.qtmetad Size: 512B - Virtual size: 160B

.pdata Size: 4KB - Virtual size: 4KB

.xdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 132B

.idata Size: 15KB - Virtual size: 14KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 52KB

.data
Size: 1024B - Virtual size: 672B

.rdata
Size: 169KB - Virtual size: 168KB

.qtmetad
Size: 512B - Virtual size: 160B

.pdata
Size: 4KB - Virtual size: 4KB

.xdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 132B

.idata
Size: 15KB - Virtual size: 14KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 1KB - Virtual size: 1KB