119f5186665a4378ded14fffceb55d4a78c30766bad59fb4922b0da8daecf9d3

Sharing

Copy URL Twitter E-mail

General

Target

119f5186665a4378ded14fffceb55d4a78c30766bad59fb4922b0da8daecf9d3
Size

592KB
MD5

29990a966f7867db4ac659fca3a0e545
SHA1

d2384d8e38a572c214ae5bc810874005251cd3b9
SHA256

119f5186665a4378ded14fffceb55d4a78c30766bad59fb4922b0da8daecf9d3
SHA512

c56095909ec9741c5950647e45a591e59ddfc1c8672780e3458a6c8187840392ca081cc6619e493451cc64a80628aa36154a2f713b76509e22c49b514c7cdf36
SSDEEP

12288:foGsZYkpqDsv6YReOqdHDdgel8PgtPHvoiWYnJB/:fOakvvgZFiel3tPPoip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119f5186665a4378ded14fffceb55d4a78c30766bad59fb4922b0da8daecf9d3

Files

119f5186665a4378ded14fffceb55d4a78c30766bad59fb4922b0da8daecf9d3
.exe windows:4 windows x86 arch:x86

d6a01740b2a27cbb2bdfe7d7976f7654

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt6core

_Z7qputenvPKcRK10QByteArray
_ZN10QArrayData10deallocateEPS_ii
_ZN10QByteArray6_emptyE
_ZN10QByteArrayC1EPKci
_ZN10QByteArrayC1Eic
_ZN10QSemaphore7acquireEi
_ZN10QSemaphore7releaseEi
_ZN10QSemaphoreC1Ei
_ZN10QSemaphoreD1Ev
_ZN11QBasicMutex12lockInternalEv
_ZN11QBasicMutex14unlockInternalEv
_ZN11QBasicMutex15destroyInternalEP13QMutexPrivate
_ZN11QFileDevice4seekEx
_ZN11QFileDevice5closeEv
_ZN11QFileDevice5flushEv
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN13QElapsedTimer5startEv
_ZN16QCoreApplication18removePostedEventsEP7QObjecti
_ZN16QCoreApplication9postEventEP7QObjectP6QEventi
_ZN18QCommandLineOptionC1ERK7QStringS2_S2_S2_
_ZN18QCommandLineOptionD1Ev
_ZN18QCommandLineParser13addHelpOptionEv
_ZN18QCommandLineParser7processERK16QCoreApplication
_ZN18QCommandLineParser9addOptionERK18QCommandLineOption
_ZN18QCommandLineParserC1Ev
_ZN18QCommandLineParserD1Ev
_ZN4QDir11currentPathEv
_ZN5QFile11setFileNameERK7QString
_ZN5QFile4openE6QFlagsIN13QIODeviceBase12OpenModeFlagEE
_ZN5QFileC1ERK7QString
_ZN5QFileC1Ev
_ZN5QFileD1Ev
_ZN6QDebug9putStringEPK5QCharj
_ZN6QDebugD1Ev
_ZN6QEventC2ENS_4TypeE
_ZN6QEventD2Ev
_ZN6QTimer11setIntervalEi
_ZN6QTimer14singleShotImplEiN2Qt9TimerTypeEPK7QObjectPN9QtPrivate15QSlotObjectBaseE
_ZN6QTimer16staticMetaObjectE
_ZN6QTimer5startEi
_ZN6QTimer5startEv
_ZN6QTimer7timeoutENS_14QPrivateSignalE
_ZN6QTimerC1EP7QObject
_ZN6QTimerD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString13toUtf8_helperERKS_
_ZN7QString6_emptyE
_ZN7QString8fromUtf8E14QByteArrayView
_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QThread11qt_metacastEPKc
_ZN7QThread5eventEP6QEvent
_ZN7QThread5startENS_8PriorityE
_ZN7QThreadC2EP7QObject
_ZN7QThreadD2Ev
_ZN9QIODevice4readEPcx
_ZN9QIODevice5writeEPKcx
_ZN9QIODevice5writeERK10QByteArray
_ZNK13QElapsedTimer7elapsedEv
_ZNK14QMessageLogger7warningEv
_ZNK18QCommandLineParser5isSetERK7QString
_ZNK18QCommandLineParser5valueERK7QString
_ZNK5QFile4sizeEv
_ZNK5QFile6existsEv
_ZNK5QFile8fileNameEv
_ZNK6QEvent5cloneEv
_ZNK7QThread10metaObjectEv
_ZNK9QIODevice6isOpenEv

qt6gui

_ZN6QImage4bitsEv
_ZN6QImageC1EiiNS_6FormatE
_ZN6QImageD1Ev
_ZN7QAction16staticMetaObjectE
_ZN7QAction9triggeredEb
_ZN8QPainter9drawImageERK6QRectFRK6QImageS2_6QFlagsIN2Qt19ImageConversionFlagEE
_ZN8QPainter9eraseRectERK6QRectF
_ZN8QPainterC1EP12QPaintDevice
_ZN8QPainterD1Ev
_ZNK6QImage4sizeEv
_ZNK6QImage5widthEv
_ZNK6QImage6heightEv

qt6network

_ZN12QLocalSocket15connectToServerERK7QString6QFlagsIN13QIODeviceBase12OpenModeFlagEE
_ZN12QLocalSocket16waitForConnectedEi
_ZN12QLocalSocketC1EP7QObject
_ZNK12QLocalSocket5stateEv

qt6widgets

_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QBoxLayoutC1ENS_9DirectionEP7QWidget
_ZN11QFileDialog13setAcceptModeENS_10AcceptModeE
_ZN11QFileDialog15getOpenFileNameEP7QWidgetRK7QStringS4_S4_PS2_6QFlagsINS_6OptionEE
_ZN11QFileDialog16setDefaultSuffixERK7QString
_ZN11QFileDialogC1EP7QWidgetRK7QStringS4_S4_
_ZN11QFileDialogD1Ev
_ZN11QFormLayout6addRowERK7QStringP7QWidget
_ZN11QFormLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1EP7QWidget
_ZN11QPushButton7setMenuEP5QMenu
_ZN11QPushButtonC1ERK7QStringP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN15QAbstractButton16staticMetaObjectE
_ZN15QAbstractButton7clickedEb
_ZN15QAbstractSlider10setMaximumEi
_ZN15QAbstractSlider12valueChangedEi
_ZN15QAbstractSlider16staticMetaObjectE
_ZN15QAbstractSlider8setValueEi
_ZN5QMenu9addActionERK7QString
_ZN5QMenuC1EP7QWidget
_ZN7QDialog4execEv
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QSliderC1EN2Qt11OrientationEP7QWidget
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP11QEnterEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPi
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMaximumSizeEii
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget7repaintEv
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN9QCheckBox12stateChangedEi
_ZN9QCheckBox13setCheckStateEN2Qt10CheckStateE
_ZN9QCheckBox16staticMetaObjectE
_ZN9QCheckBoxC1ERK7QStringP7QWidget
_ZNK11QFileDialog13selectedFilesEv
_ZNK15QAbstractSlider5valueEv
_ZNK7QWidget10metaObjectEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__getmainargs
__initenv
__mb_cur_max
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_assert
_cexit
_errno
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcmp
memcpy
memmove
memset
rand
setlocale
signal
srand
strchr
strerror
strlen
strncmp
vfprintf
time
wcslen
wcstombs
_read
_open
_lseek

shell32

CommandLineToArgvW

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister
__udivmoddi4

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvj
_Znaj
_Znwj
__cxa_throw_bad_array_new_length
__gxx_personality_sj0

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6a01740b2a27cbb2bdfe7d7976f7654

Headers

DLL Characteristics

File Characteristics

Imports

qt6core

qt6gui

qt6network

qt6widgets

kernel32

msvcrt

shell32

libgcc_s_sjlj-1

libstdc++-6

Sections

.text Size: 284KB - Virtual size: 283KB

.data Size: 59KB - Virtual size: 58KB

.rdata Size: 224KB - Virtual size: 224KB

.bss Size: - Virtual size: 40KB

.idata Size: 11KB - Virtual size: 11KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 284KB - Virtual size: 283KB

.data
Size: 59KB - Virtual size: 58KB

.rdata
Size: 224KB - Virtual size: 224KB

.bss
Size: - Virtual size: 40KB

.idata
Size: 11KB - Virtual size: 11KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 11KB - Virtual size: 10KB