7662bd967aff138243ff735f6c686ca0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7662bd967aff138243ff735f6c686ca0N.exe
Size

1.7MB
MD5

7662bd967aff138243ff735f6c686ca0
SHA1

3dfb42d69ad4912358a5a83417b6f52bf4e2939e
SHA256

3572be5686b2207ad47162dc18d903343445ebd7720004de8db09bf759da56d1
SHA512

bbea517f2e27a8ff775e0ce9af547f170da66e6c5be796c3d2f165f39b911761097a2dd1840f8ac4e8e801806d84ffa887bc5bd1db546c4106480995afd1c7d4
SSDEEP

49152:LqsegtPPjgsJJsv6tWKFdu9CoTKNOogRJ/foq0:igtJsv6tWKFdu9CbpGCq0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7662bd967aff138243ff735f6c686ca0N.exe

Files

7662bd967aff138243ff735f6c686ca0N.exe
.exe windows:6 windows x64 arch:x64

7bb8303f44e25339dbda90119a516efe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\qt\work\qt\qttools\bin\windeployqt.pdb

Imports

shlwapi

PathFindOnPathW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

advapi32

SystemFunction036

shell32

CommandLineToArgvW

netapi32

NetApiBufferFree
NetShareEnum

msvcp140

??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QEAA@XZ

kernel32

QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
ResetEvent
DeleteCriticalSection
CreateEventW
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FindNextFileW
FindFirstFileExW
GetModuleFileNameW
GetSystemInfo
WriteFile
SetFilePointerEx
SetEndOfFile
GetFileType
FlushFileBuffers
SystemTimeToFileTime
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
MoveFileExW
MoveFileW
CopyFileW
DeviceIoControl
SetErrorMode
SetFileTime
CreateFileW
GetLongPathNameW
GetShortPathNameW
GetTempFileNameW
ReadFile
SetFilePointer
GetTempPathW
CloseHandle
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
LocalFree
FormatMessageW
IsBadReadPtr
CompareStringEx
GetLocalTime
GetCommandLineW
GetCurrentProcessId
GetModuleHandleW
GetProcAddress
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetFileAttributesExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetLogicalDrives
RemoveDirectoryW
WaitForSingleObjectEx

vcruntime140

__current_exception
__C_specific_handler
memchr
strchr
__current_exception_context
memcmp
memcpy
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_purecall
memmove
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
strcmp

api-ms-win-crt-runtime-l1-1-0

_initterm
_crt_atexit
__p___argc
__p___argv
exit
_get_initial_narrow_environment
_register_onexit_function
_initialize_onexit_table
terminate
_errno
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
strerror
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_exit
_initterm_e

api-ms-win-crt-stdio-l1-1-0

_write
ftell
__p__commode
_get_osfhandle
_fileno
fwrite
_open_osfhandle
__stdio_common_vsprintf
__acrt_iob_func
fseek
fread
fgets
__stdio_common_vsnprintf_s
feof
fclose
_lseek
_set_fmode
__stdio_common_vfprintf
__stdio_common_vsscanf
fflush
_read
_close
fputs

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
_set_new_mode
_callnewh

api-ms-win-crt-environment-l1-1-0

_putenv_s
getenv_s

api-ms-win-crt-time-l1-1-0

_mktime64
_get_tzname
_tzset
_get_timezone
_localtime64_s

api-ms-win-crt-math-l1-1-0

__setusermatherr
_dclass
pow
floorf

api-ms-win-crt-locale-l1-1-0

_free_locale
_configthreadlocale
_create_locale

api-ms-win-crt-filesystem-l1-1-0

_wchmod
_waccess

api-ms-win-crt-utility-l1-1-0

rand_s

Sections

.text
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 619KB - Virtual size: 619KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7bb8303f44e25339dbda90119a516efe

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

ole32

advapi32

shell32

netapi32

msvcp140

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

Sections

.text Size: 548KB - Virtual size: 547KB

.rdata Size: 619KB - Virtual size: 619KB

.data Size: 18KB - Virtual size: 24KB

.pdata Size: 29KB - Virtual size: 29KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 548KB - Virtual size: 547KB

.rdata
Size: 619KB - Virtual size: 619KB

.data
Size: 18KB - Virtual size: 24KB

.pdata
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 568KB - Virtual size: 572KB