d77cc961552987bb43b7f8443a5bd53a70eb4eae302b7cd47dfc1a91dbe3e102

Sharing

Copy URL

Twitter E-mail

General

Target

d77cc961552987bb43b7f8443a5bd53a70eb4eae302b7cd47dfc1a91dbe3e102
Size

10.0MB
MD5

2896c35c084dd184d80d8c36bdd975bf
SHA1

c5fe8a7716a0fae4419be15410f8ab22d6d1763c
SHA256

d77cc961552987bb43b7f8443a5bd53a70eb4eae302b7cd47dfc1a91dbe3e102
SHA512

0de964e45bc3ec8beed17d4903fc171bc9f7d99f78c99fd22ab3cb401fdd026356fa4484bae7adddebce936027caba790630224f5811d29ceecf6b6f35739175
SSDEEP

196608:EG43gh4PkJg6Lw8L+6B23ek3RiQAP16UsfX7Zq2KrixrDS+q:+gB3Lw4rA39RaP12qKfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d77cc961552987bb43b7f8443a5bd53a70eb4eae302b7cd47dfc1a91dbe3e102

Files

d77cc961552987bb43b7f8443a5bd53a70eb4eae302b7cd47dfc1a91dbe3e102
.exe windows:6 windows x86 arch:x86

594afbc72c91a8f562ea5a54dd110423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

alximg

?DestroyFrames@CxImage@@QAE_NXZ

libxl

xlCreateBookA

math

??0LmList@@QAE@XZ

qt5widgets

?changeEvent@QLabel@@MAEXPAVQEvent@@@Z

qt5gui

?setQuitOnLastWindowClosed@QGuiApplication@@SAX_N@Z

qt5core

??1QBuffer@@UAE@XZ

shell32

CommandLineToArgvW

mfc140

ord6814

kernel32

WideCharToMultiByte

user32

GetSubMenu

gdi32

ResetDCA

comdlg32

CommDlgExtendedError

winspool.drv

ord202

comctl32

ImageList_DragShowNolock

shlwapi

PathRemoveFileSpecA

ole32

OleRun

oleaut32

GetErrorInfo

gdiplus

GdipCreateBitmapFromFile

msvcp140

_Cosh

ws2_32

WSASend

iphlpapi

GetAdaptersInfo

woodcutting

?is_bottom_depend_on@cuttingBoard@@UAE_NPAV1@@Z

woodnesting

?is_having_back_datas@sncBoardModal@@QAEX_N@Z

vcruntime140

__std_exception_copy

api-ms-win-crt-runtime-l1-1-0

abort

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

feof

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-string-l1-1-0

isalnum

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

ceil

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mark
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.encode
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

594afbc72c91a8f562ea5a54dd110423

Headers

DLL Characteristics

File Characteristics

Imports

alximg

libxl

math

qt5widgets

qt5gui

qt5core

shell32

mfc140

kernel32

user32

gdi32

comdlg32

winspool.drv

comctl32

shlwapi

ole32

oleaut32

gdiplus

msvcp140

ws2_32

iphlpapi

woodcutting

woodnesting

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 6.3MB

.rdata Size: - Virtual size: 862KB

.data Size: - Virtual size: 182KB

.mark Size: - Virtual size: 48B

.encode Size: - Virtual size: 2KB

.text Size: - Virtual size: 6.4MB

.data Size: - Virtual size: 127KB

.text Size: 9.7MB - Virtual size: 9.7MB

.data Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 234KB - Virtual size: 233KB

.text
Size: - Virtual size: 6.3MB

.rdata
Size: - Virtual size: 862KB

.data
Size: - Virtual size: 182KB

.mark
Size: - Virtual size: 48B

.encode
Size: - Virtual size: 2KB

.text
Size: - Virtual size: 6.4MB

.data
Size: - Virtual size: 127KB

.text
Size: 9.7MB - Virtual size: 9.7MB

.data
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 234KB - Virtual size: 233KB