D:\Files\Project source\KunkunSpeed\24251\bin\QQSpeedServer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
698b197beade0447c9ce436d992e4e0d2b6c0e97b4deb74780cf9c9492617ba7.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
698b197beade0447c9ce436d992e4e0d2b6c0e97b4deb74780cf9c9492617ba7.exe
Resource
win10v2004-20241007-en
General
-
Target
698b197beade0447c9ce436d992e4e0d2b6c0e97b4deb74780cf9c9492617ba7
-
Size
1.5MB
-
MD5
06f50c3d54c7986fac6f7971fc43630d
-
SHA1
c2c1018500f8fb01fe11819c62d92632ebbee71d
-
SHA256
698b197beade0447c9ce436d992e4e0d2b6c0e97b4deb74780cf9c9492617ba7
-
SHA512
4205b01ccdeee217a7977756e80b9969dadabe5a23d8e2870f6774ee165347ce4259fe41175163774e979d478bdf977daad2cd32a38e499081072ead4a23bfac
-
SSDEEP
24576:DaCGK5eyf+wzVAHkLSaWp9Fz9wWqprLDiOHN3t2W0:DhGK5VTSElWpeWqpfDiOHht2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 698b197beade0447c9ce436d992e4e0d2b6c0e97b4deb74780cf9c9492617ba7
Files
-
698b197beade0447c9ce436d992e4e0d2b6c0e97b4deb74780cf9c9492617ba7.exe windows:6 windows x86 arch:x86
10366a953dabb3975d1cb8cc33352ed1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
GetDynamicTimeZoneInformation
GetCurrentThreadId
GetConsoleMode
GetCurrentProcessId
GetTickCount
WaitForSingleObject
MultiByteToWideChar
GetLastError
CloseHandle
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueue
SetConsoleCtrlHandler
SetConsoleTitleA
GetCurrentProcess
CreateFileW
GetFileAttributesA
LoadLibraryA
GetLocalTime
FreeLibrary
GetSystemTimeAsFileTime
WriteConsoleA
SetUnhandledExceptionFilter
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
CreateProcessW
GetExitCodeProcess
HeapReAlloc
ReadConsoleW
ReadFile
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetTimeZoneInformation
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetStdHandle
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
IsDebuggerPresent
Sleep
FormatMessageA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
LocalFree
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
WaitForSingleObjectEx
GetExitCodeThread
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
TerminateProcess
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
SetEndOfFile
user32
wsprintfW
sqlite3
sqlite3_column_text
sqlite3_column_int
sqlite3_column_blob
sqlite3_wal_checkpoint_v2
sqlite3_exec
sqlite3_errmsg
sqlite3_open_v2
sqlite3_bind_text
sqlite3_initialize
sqlite3_bind_blob
sqlite3_shutdown
sqlite3_config
sqlite3_bind_int
sqlite3_step
sqlite3_prepare_v2
sqlite3_finalize
sqlite3_reset
sqlite3_clear_bindings
sqlite3_close
ws2_32
htons
ntohl
inet_addr
htonl
ntohs
hpsocket
HP_Create_UdpNode
HP_Create_TcpServer
HP_Destroy_TcpServer
HP_Destroy_UdpNode
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE