1e24004010132d79552a9f9eb1c1a7f6e50f7e124947867f43c8d36d7b65e168N

Sharing

Copy URL

Twitter E-mail

General

Target

1e24004010132d79552a9f9eb1c1a7f6e50f7e124947867f43c8d36d7b65e168N
Size

51KB
MD5

97ceb88400e054a6d584099621a7d850
SHA1

88d184ce01536a940069732e61f44a9ca33cef5d
SHA256

1e24004010132d79552a9f9eb1c1a7f6e50f7e124947867f43c8d36d7b65e168
SHA512

bec7f85d77e2f2c29b41b40fcc5821934ebcc0c471efd01caddacd4e49c1a42d8fcbf2e78a21f0c2e852ea6920a0444abe515b844851eb5f12aa4641989a8ea4
SSDEEP

384:fb94GW4TQv9ErhjAMHBof0vMLTzU+votyS+cwrkj8uE14Z3ITp4F/Z3hTKSP+qfw:71QVEVMEw5YR9ZQ+F/ZGPoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e24004010132d79552a9f9eb1c1a7f6e50f7e124947867f43c8d36d7b65e168N

Files

1e24004010132d79552a9f9eb1c1a7f6e50f7e124947867f43c8d36d7b65e168N
.dll windows:6 windows x64 arch:x64

95e54b636e01c0df2dd059ddcd1df12c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qt53dquick_conda

?staticMetaObject@Quick3DNodeInstantiator@Quick@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@Quick3DEntityLoader@Quick@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@Quick3DEntity@Quick@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@Quick3DNode@Quick@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@Quick3DNodeV9@Quick@Qt3DCore@@2UQMetaObject@@B
?qt_metacast@Quick3DNodeV9@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@Quick3DNodeInstantiator@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@Quick3DNode@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@Quick3DJoint@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@Quick3DEntityLoader@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@Quick3DEntity@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@QQuaternionAnimation@Quick@Qt3DCore@@UEAAPEAXPEBD@Z
?staticMetaObject@Quick3DJoint@Quick@Qt3DCore@@2UQMetaObject@@B
?qt_metacall@Quick3DNodeInstantiator@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@Quick3DNode@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@Quick3DJoint@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@Quick3DEntityLoader@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@Quick3DEntity@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QQuaternionAnimation@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@Quick3DNodeV9@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@Quick3DNodeInstantiator@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@Quick3DNode@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@Quick3DJoint@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@Quick3DEntityLoader@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?Quick3D_initialize@Quick@Qt3DCore@@YAXXZ
?metaObject@Quick3DEntity@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?qt_metacall@Quick3DNodeV9@Quick@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QQuaternionAnimation@Quick@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?componentComplete@Quick3DNodeInstantiator@Quick@Qt3DCore@@UEAAXXZ
?classBegin@Quick3DNodeInstantiator@Quick@Qt3DCore@@UEAAXXZ
?q_quaternionInterpolator@Quick@Qt3DCore@@YA?AVQVariant@@AEBVQQuaternion@@0N@Z
??0QQuaternionAnimation@Quick@Qt3DCore@@QEAA@PEAVQObject@@@Z
??0Quick3DJoint@Quick@Qt3DCore@@QEAA@PEAVQObject@@@Z
??0Quick3DNodeInstantiator@Quick@Qt3DCore@@QEAA@PEAVQNode@2@@Z
??1Quick3DEntityLoader@Quick@Qt3DCore@@UEAA@XZ
??0Quick3DEntityLoader@Quick@Qt3DCore@@QEAA@PEAVQNode@2@@Z
??1Quick3DEntity@Quick@Qt3DCore@@UEAA@XZ
??0Quick3DEntity@Quick@Qt3DCore@@QEAA@PEAVQObject@@@Z
??0Quick3DNode@Quick@Qt3DCore@@QEAA@PEAVQObject@@@Z
??0Quick3DNodeV9@Quick@Qt3DCore@@QEAA@PEAVQObject@@@Z
?Quick3D_registerType@Quick@Qt3DCore@@YAXPEBD0HH@Z
?Quick3D_uninitialize@Quick@Qt3DCore@@YAXXZ
?staticMetaObject@QQuaternionAnimation@Quick@Qt3DCore@@2UQMetaObject@@B

qt5quick_conda

?transition@QQuickPropertyAnimation@@MEAAPEAVQAbstractAnimationJob@@AEAV?$QList@VQQuickStateAction@@@@AEAV?$QList@VQQmlProperty@@@@W4TransitionDirection@QQuickAbstractAnimation@@PEAVQObject@@@Z
?threadingModel@QQuickAbstractAnimation@@UEBA?AW4ThreadingModel@1@XZ
?setTarget@QQuickAbstractAnimation@@EEAAXAEBVQQmlProperty@@@Z
?setDuration@QQuickPropertyAnimation@@UEAAXH@Z
?duration@QQuickPropertyAnimation@@UEBAHXZ
?componentComplete@QQuickAbstractAnimation@@UEAAXXZ
?classBegin@QQuickAbstractAnimation@@UEAAXXZ
??1QQuickPropertyAnimation@@UEAA@XZ

qt53dcore_conda

?sceneChangeEvent@QSkeletonLoader@Qt3DCore@@MEAAXAEBV?$QSharedPointer@VQSceneChange@Qt3DCore@@@@@Z
?qt_metacast@QSkeletonLoader@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@QJoint@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@QEntity@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacast@QArmature@Qt3DCore@@UEAAPEAXPEBD@Z
?qt_metacall@QTransform@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QSkeletonLoader@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QJoint@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QEntity@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QArmature@Qt3DCore@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QTransform@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@QSkeletonLoader@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@QJoint@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@QEntity@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?metaObject@QArmature@Qt3DCore@@UEBAPEBUQMetaObject@@XZ
?createNodeCreationChange@QTransform@Qt3DCore@@EEBA?AV?$QSharedPointer@VQNodeCreatedChangeBase@Qt3DCore@@@@XZ
?createNodeCreationChange@QSkeletonLoader@Qt3DCore@@EEBA?AV?$QSharedPointer@VQNodeCreatedChangeBase@Qt3DCore@@@@XZ
?sceneChangeEvent@QNode@Qt3DCore@@MEAAXAEBV?$QSharedPointer@VQSceneChange@Qt3DCore@@@@@Z
?sceneChangeEvent@QTransform@Qt3DCore@@MEAAXAEBV?$QSharedPointer@VQSceneChange@Qt3DCore@@@@@Z
?staticMetaObject@QNode@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@QComponent@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@QArmature@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@QAbstractSkeleton@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@QSkeletonLoader@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@QTransform@Qt3DCore@@2UQMetaObject@@B
?staticMetaObject@QEntity@Qt3DCore@@2UQMetaObject@@B
?qt_metacast@QTransform@Qt3DCore@@UEAAPEAXPEBD@Z
??1QNode@Qt3DCore@@UEAA@XZ
??0QArmature@Qt3DCore@@QEAA@PEAVQNode@1@@Z
??1QArmature@Qt3DCore@@UEAA@XZ
??0QSkeletonLoader@Qt3DCore@@QEAA@PEAVQNode@1@@Z
??1QSkeletonLoader@Qt3DCore@@UEAA@XZ
??0QTransform@Qt3DCore@@QEAA@PEAVQNode@1@@Z
??1QTransform@Qt3DCore@@UEAA@XZ
??0QJoint@Qt3DCore@@QEAA@PEAVQNode@1@@Z
??1QJoint@Qt3DCore@@UEAA@XZ
??0QEntity@Qt3DCore@@QEAA@PEAVQNode@1@@Z
??1QEntity@Qt3DCore@@UEAA@XZ
?createNodeCreationChange@QArmature@Qt3DCore@@EEBA?AV?$QSharedPointer@VQNodeCreatedChangeBase@Qt3DCore@@@@XZ
?createNodeCreationChange@QEntity@Qt3DCore@@EEBA?AV?$QSharedPointer@VQNodeCreatedChangeBase@Qt3DCore@@@@XZ
?createNodeCreationChange@QJoint@Qt3DCore@@EEBA?AV?$QSharedPointer@VQNodeCreatedChangeBase@Qt3DCore@@@@XZ
?createNodeCreationChange@QNode@Qt3DCore@@EEBA?AV?$QSharedPointer@VQNodeCreatedChangeBase@Qt3DCore@@@@XZ
?staticMetaObject@QJoint@Qt3DCore@@2UQMetaObject@@B

qt5qml_conda

??0QQmlExtensionPlugin@@QEAA@PEAVQObject@@@Z
?qt_metacall@QQmlExtensionPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QQmlExtensionPlugin@@UEAAPEAXPEBD@Z
?staticMetaObject@QQmlExtensionPlugin@@2UQMetaObject@@B
?initializeEngine@QQmlExtensionPlugin@@UEAAXPEAVQQmlEngine@@PEBD@Z
?qmlRegisterModule@@YAXPEBDHH@Z
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPEAVQObject@@@Z
??1QQmlParserStatus@@UEAA@XZ
??1QJSValue@@QEAA@XZ
??1QQmlExtensionPlugin@@UEAA@XZ

qt5core_conda

?reserve@QByteArray@@QEAAXH@Z
?append@QByteArray@@QEAAAEAV1@D@Z
?append@QByteArray@@QEAAAEAV1@PEBD@Z
??0QString@@QEAA@XZ
??0QString@@QEAA@VQLatin1String@@@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
?registerNormalizedTypedef@QMetaType@@SAHAEBVQByteArray@@H@Z
??1QObject@@UEAA@XZ
?registerInterpolator@QVariantAnimation@@CAXP6A?AVQVariant@@PEBX0N@ZH@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?className@QMetaObject@@QEBAPEBDXZ
??0QByteArray@@QEAA@PEBDH@Z
??0QByteArray@@QEAA@XZ
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
??1QByteArray@@QEAA@XZ

kernel32

CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
SetUnhandledExceptionFilter

vcruntime140

memcpy
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_register_onexit_function

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95e54b636e01c0df2dd059ddcd1df12c

Headers

DLL Characteristics

File Characteristics

Imports

qt53dquick_conda

qt5quick_conda

qt53dcore_conda

qt5qml_conda

qt5core_conda

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 2KB - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.qtmetad Size: 512B - Virtual size: 103B

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 1024B - Virtual size: 544B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.qtmetad
Size: 512B - Virtual size: 103B

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 1024B - Virtual size: 544B