General

  • Target

    xdumpgo.rar

  • Size

    39.3MB

  • MD5

    816917b5a2fb04dfa8104cd866768eae

  • SHA1

    1f5d5b6a7278c0da1e4bf1f9caa7a59893d46a3a

  • SHA256

    92f3e60bac10483e6ec1955e0d7cdc93311100eb93924ad2760f36063de10526

  • SHA512

    6425fa3635b78dd7b0a420bac30481d2490d2a7dc82ae67ad816e343b13b7ca02be4f2790c25394e6b59bff29a4c2947625b045d9dee33d0646f50032ef93d15

  • SSDEEP

    786432:XXnPG43C87X/HqAbUY2rzHYNKZQKncHX8q43gpKZQKncHX8q43g6:Pnd/q3xTYNWcZWcq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • xdumpgo.rar
    .rar
  • xdumpgo/D3Dcompiler_47.dll
    .dll windows:6 windows x64 arch:x64

    2ce80dc262aecd9b9f45ee13d6b30c08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/Qt5Core.dll
    .dll windows:4 windows x64 arch:x64

    b7ac1f6bc8d5bde8deea38e9becbff05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/Qt5Gui.dll
    .dll windows:4 windows x64 arch:x64

    b192b7a223ad8e5f7bebfd2048125db2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/Qt5Svg.dll
    .dll windows:4 windows x64 arch:x64

    1b3e826d61c2f23d106a38573ef5c948


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/Qt5Widgets.dll
    .dll windows:4 windows x64 arch:x64

    bfceba1ec7cd998737e020f4612d0f7d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/XDumpGO.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • xdumpgo/XDumpGO.rar
    .rar
  • XDumpGO.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • xdumpgo/ap.db
  • xdumpgo/config.json
  • xdumpgo/iconengines/qsvgicon.dll
    .dll windows:4 windows x64 arch:x64

    b077a8cc9d0019528b23cbf254e4ad4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qgif.dll
    .dll windows:4 windows x64 arch:x64

    4329ef02212194427be44a36e0b9a121


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qicns.dll
    .dll windows:4 windows x64 arch:x64

    10d9b698ddb07a2fd3705f32d5790c63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qico.dll
    .dll windows:4 windows x64 arch:x64

    6b05618cc8a008ebc8833ded1ed2aa60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qjpeg.dll
    .dll windows:4 windows x64 arch:x64

    8df33cd6e02f67d2b98520b1edfe03da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qsvg.dll
    .dll windows:4 windows x64 arch:x64

    6f65fb0cf0449facddbfc1671c62c47e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qtga.dll
    .dll windows:4 windows x64 arch:x64

    205a8e82b8dc38d9ed8492a53a119707


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qtiff.dll
    .dll windows:4 windows x64 arch:x64

    ab6717420fe07c98b487e22dab9c49d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qwbmp.dll
    .dll windows:4 windows x64 arch:x64

    9751f719631286f37a41d22090e35bfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/imageformats/qwebp.dll
    .dll windows:4 windows x64 arch:x64

    34b624b4badc306a57f11d7b395f42d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/libEGL.dll
    .dll windows:4 windows x64 arch:x64

    eb91385afce4cfa47954ba8506eeb2bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/libGLESV2.dll
    .dll windows:4 windows x64 arch:x64

    dc80800d96a4e83457229bbf61bc051c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    b8547353b6beb87cf7560462f9aacd11


    Headers

    Imports

    Exports

    Sections

  • xdumpgo/libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    2ef0ef5b02a4c5c00c38f44ef05e3590


    Headers

    Imports

    Exports

    Sections

  • xdumpgo/libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    dd7ccacfff5cb681a985c52c384afacb


    Headers

    Imports

    Exports

    Sections

  • xdumpgo/opengl32sw.dll
    .dll windows:6 windows x64 arch:x64

    7c204a15e246f025a7513db5a566a6e9


    Headers

    Imports

    Exports

    Sections

  • xdumpgo/platforms/qwindows.dll
    .dll windows:4 windows x64 arch:x64

    f2da56ed0baa3e99a91acffa533db2e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/styles/qwindowsvistastyle.dll
    .dll windows:4 windows x64 arch:x64

    fb7a74935a4141e9268a43927b7d5a71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdumpgo/translations/qt_ar.qm
  • xdumpgo/translations/qt_bg.qm
  • xdumpgo/translations/qt_ca.qm
  • xdumpgo/translations/qt_cs.qm
  • xdumpgo/translations/qt_da.qm
  • xdumpgo/translations/qt_de.qm
  • xdumpgo/translations/qt_en.qm
  • xdumpgo/translations/qt_es.qm
  • xdumpgo/translations/qt_fi.qm
  • xdumpgo/translations/qt_fr.qm
  • xdumpgo/translations/qt_gd.qm
  • xdumpgo/translations/qt_he.qm
  • xdumpgo/translations/qt_hu.qm
  • xdumpgo/translations/qt_it.qm
  • xdumpgo/translations/qt_ja.qm
  • xdumpgo/translations/qt_ko.qm
  • xdumpgo/translations/qt_lv.qm
  • xdumpgo/translations/qt_pl.qm
  • xdumpgo/translations/qt_ru.qm
  • xdumpgo/translations/qt_sk.qm
  • xdumpgo/translations/qt_uk.qm
  • xdumpgo/translations/qt_zh_TW.qm