General

  • Target

    flameshot-12.1.0-win64.zip

  • Size

    43.9MB

  • MD5

    c89e24a2fc6f9235d67d3fae6b0e36c3

  • SHA1

    cd29f441f1aa6bfebecbae246200dfee25eba4d3

  • SHA256

    09d5fabedbc8e4ed9233030c10f6e3a46d051c0efa2c88c081b3ebcdf1ae7596

  • SHA512

    dae2c477e234e4424177d2cff2c7301af9dcbcf35fc22da96de8a793df037c831b9483dbda6f4ec2e36f53e457299f074cb33a5414492a49478ff450714fb61d

  • SSDEEP

    786432:ucpFNuLbT4U4VXpbmAlf2+oEcuQdU8N/IbwU66782ByQaCkFiFIQMx158zFV:ucpFNuLbTh4lpSe++oSora82cQaCkFU3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • flameshot-12.1.0-win64.zip
    .zip

    Password: 322

  • flameshot-12.1.0-win64/bin/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/Qt5DBus.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    9b237e93afcc7ace33031c9cf4b68c7d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    6c684f5759e91250e01af7b49c78ca3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/bearer/qgenericbearer.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    7e5a6b3fee029b445d01034aff7a919d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 322

    5f9b23bd4b0029001f687a1ad625be31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/flameshot.exe
    .exe windows:6 windows x64 arch:x64

    698024da503fb0023aab263823eafd9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    aab72f7869a2e9efd56555fd6d70675b


    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    cd38257393085dee6c5bd00d5aef94a4


    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    c1687527a3d5b7532fa653f66eba12e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    2f8a18fefaba28c3707dae8605d51b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/msvcp140_atomic_wait.dll
    .dll windows:6 windows x64 arch:x64

    c1dfd2e42294117ca33d3c6b21826f93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    536e29dae203b5f7347030aec0cba513


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/opengl32sw.dll
    .dll windows:6 windows x64 arch:x64

    7c204a15e246f025a7513db5a566a6e9


    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/translations/Internationalization_bg.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_ca.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_cs.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_de_DE.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_el.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_es.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_eu.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_fa.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_fi.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_fr.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_gl.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_grc.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_he.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_hu.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_id.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_it_IT.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_ja.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_ka.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_ko.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_nb_NO.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_nl.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_nl_NL.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_pl.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_pt_BR.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_ru.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_sk.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_sr_SP.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_sv_SE.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_tr.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_uk.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_vi.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_zh_CN.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_zh_HK.qm
  • flameshot-12.1.0-win64/bin/translations/Internationalization_zh_TW.qm
  • flameshot-12.1.0-win64/bin/vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • flameshot-12.1.0-win64/bin/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flameshot-12.1.0-win64/bin/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections