General

  • Target
    Brokkr-windows-arm64.exe
  • Size 28.0MB
  • Sample260801-txpg9sde47
  • SHA256 04f2d2126977c7d1a95bec4987c9f76a0e9cfc1958ce1e4882a867219c2e40ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Brokkr-windows-arm64.exe
    .exe 28.0MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/NSIS.InstallOptions.ini
    641B
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    9KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • bin/Qt6Core.dll
    5.6MB
  • bin/Qt6Gui.dll
    7.6MB
  • bin/Qt6Network.dll
    1.6MB
  • bin/Qt6Svg.dll
    484KB
  • bin/Qt6Widgets.dll
    5.9MB
  • bin/brokkr.exe
    849KB
  • bin/dxcompiler.dll
    31.6MB
  • bin/dxil.dll
    2.7MB
  • bin/qt.conf
    22B
  • plugins/generic/qtuiotouchplugin.dll
    94KB
  • plugins/iconengines/qsvgicon.dll
    60KB
  • plugins/imageformats/qgif.dll
    44KB
  • plugins/imageformats/qico.dll
    45KB
  • plugins/imageformats/qjpeg.dll
    433KB
  • plugins/imageformats/qsvg.dll
    37KB
  • plugins/networkinformation/qnetworklistmanager.dll
    74KB
  • plugins/platforms/qwindows.dll
    828KB
  • plugins/styles/qmodernwindowsstyle.dll
    210KB
  • plugins/tls/qcertonlybackend.dll
    98KB
  • plugins/tls/qschannelbackend.dll
    230KB
  • redist/vc_redist.arm64.exe
    .exe 11.2MB
  • translations/qt_ar.qm
    156KB
  • translations/qt_bg.qm
    161KB
  • translations/qt_ca.qm
    204KB
  • translations/qt_cs.qm
    170KB
  • translations/qt_da.qm
    177KB
  • translations/qt_de.qm
    217KB
  • translations/qt_en.qm
    33B
  • translations/qt_es.qm
    161KB
  • translations/qt_fa.qm
    144KB
  • translations/qt_fi.qm
    175KB
  • translations/qt_fr.qm
    155KB
  • translations/qt_gd.qm
    185KB
  • translations/qt_he.qm
    135KB
  • translations/qt_hr.qm
    146KB
  • translations/qt_hu.qm
    201KB
  • translations/qt_it.qm
    157KB
  • translations/qt_ja.qm
    126KB
  • translations/qt_ka.qm
    196KB
  • translations/qt_ko.qm
    153KB
  • translations/qt_lg.qm
    234KB
  • translations/qt_lv.qm
    150KB
  • translations/qt_nl.qm
    198KB
  • translations/qt_nn.qm
    191KB
  • translations/qt_pl.qm
    159KB
  • translations/qt_pt_BR.qm
    203KB
  • translations/qt_ru.qm
    198KB
  • translations/qt_sk.qm
    122KB
  • translations/qt_tr.qm
    186KB
  • translations/qt_uk.qm
    154KB
  • translations/qt_zh_CN.qm
    133KB
  • translations/qt_zh_TW.qm
    123KB

Brokkr-windows-arm64.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 04f2d2126977c7d1a95bec4987c9f76a0e9cfc1958ce1e4882a867219c2e40ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13596
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths