bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a

General

Target
bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a
Size 93KB
Sample260722-h6e5ea1cle
SHA256 bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a
MD5 ef2b02f501a33fa2a09a139b2f5f410b
SHA1 574bbea7e0cedc3e30cdc356677c20811415cf53
SHA512 d575edc7043476330f14c89d0bb3d411bd0d020558d5b1314da8da6f51293e7f6396e60cf5c7a39086e416a297e116fdc6dc8ed57427b1ea5a795230bdf44cb8
SSDEEP 96:ILFwijE2JZY6AgvI58KKRnBqvkvM6ZhvEjELt1VKnC4iEEZiC1BGE7UGPPcbsg5p:IBjFJiyQ1K/VzFEjQV+8ZiCnGnG/
TLSH
T12393A507F7C7C8E9F89612709FA6CFC4E077BA63AEA4531F76C8431E24A5A548D41B60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a

File Explorer

bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a

.exe 93KB

bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a

IMPHASH 3c4dcdd08855b1d785a01d672455bd63
SHA256 bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a
MD5 ef2b02f501a33fa2a09a139b2f5f410b
SHA1 574bbea7e0cedc3e30cdc356677c20811415cf53
SHA512 d575edc7043476330f14c89d0bb3d411bd0d020558d5b1314da8da6f51293e7f6396e60cf5c7a39086e416a297e116fdc6dc8ed57427b1ea5a795230bdf44cb8
SSDEEP 96:ILFwijE2JZY6AgvI58KKRnBqvkvM6ZhvEjELt1VKnC4iEEZiC1BGE7UGPPcbsg5p:IBjFJiyQ1K/VzFEjQV+8ZiCnGnG/
TLSH
T12393A507F7C7C8E9F89612709FA6CFC4E077BA63AEA4531F76C8431E24A5A548D41B60
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

99993

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\devops\workspace\p-37d34ce895ed4865ac95061b653d796f\Output\BinFinal\QQApp.pdb

xgraphic32

UnlockBitmapBits CreateMemBitmap DeleteBitmap LockBitmapBits

renderservice

InitServerByCommandLine DestroyServerChannel ?ReadSerialize@@YA_NPAXAA_N@Z CreateServerChannel ?ReadSerialize@@YA_NPAXAAJ@Z ?ReadSerialize@@YA_NPAXAAUtagVARIANT@@@Z ?ReadSerialize@@YA_NPAXAAUtagDISPPARAMS@@@Z ?DestroySerialize@@YAXPAX@Z rsSetChannelMessageProc ?CreateSerialize@@YAPAXXZ ?WriteSerialize@@YA_NPAXABI@Z ?WriteSerialize@@YA_NPAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?WriteSerialize@@YA_NPAXABUtagDISPPARAMS@@@Z rsSendChannelMessageSync rsSendChannelMessage ?ReadSerialize@@YA_NPAXAAH@Z ?WriteSerialize@@YA_NPAXABUtagSIZE@@@Z ?WriteSerialize@@YA_NPAXAB_N@Z ?ReadSerialize@@YA_NPAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?ReadSerialize@@YA_NPAXAAK@Z ?ReadSerialize@@YA_NPAXAAI@Z

arkSetStoragePath arkLoadApplicationInstance arkEndApp arkStartApp arkModuleRequireDLL arkDispatchTaskSync arkCreateDispatchQueue arkGetDispatchQueueLabel arkGetCurrentDispatchQueue arkCloseDispatchQueue arkModuleCallbackRegister arkDestroyContainer arkGetApplicationID arkBindRootView arkCreateContainerCanvasFromBitmap arkBitma arkBitmapCreateFromData arkRunApplicationInstance arkSetLogCallback arkCreateContainer arkHTTPSetDownloadDirectory arkDestroyRootView arkCreateRootView arkSetApplicationCallback arkDispatchTaskAsync arkHTTPStartup arkCanvasDestroy arkGetScriptEngine arkGetSrcAppName ord9 ord2 ord6

Sharing

General

Malware Config

Signatures

File Explorer

bc2df78640e9181d8b9b6ac99d1c1c4bc3eaa116ee5e391a0f88adb483f1b90a

xgraphic32

renderservice

generic