QSO J1228+3128[.]exe

General

Target
QSO J1228+3128.exe
Size 206KB
Sample260822-tdetqa1set
SHA256 adac36e4faab7c953354b50391774c9b01379cb4445de52f074464c58d751d1d
MD5 d5f741b0bb991604d5331de863d49d8b
SHA1 1c73d032211696e954259b48c3e83029d7852846
SHA512 a84b1acec34996a5047ff082985510cecf1d381b216e3b02dca2113b16500d417c6f89833ad93a3b1ba96b23cbcc8af5cd5d065fe6235d5273c1c8412538fa30
SSDEEP 3072:CKEiM0DPxUKQf5kv+Tx5DQdqRd+vKWbb1boDu8:WifPxDzvRdMdoh1D8
TLSH
T14F24F703379ED8E0F0923575047C47AE2738F7D61932976B1B61AE89F7322C20E295DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QSO J1228+3128.exe

File Explorer

QSO J1228+3128.exe

.exe 206KB

QSO J1228+3128.exe

IMPHASH bc435f8e44f15daf0a963adc0a54ccdc
SHA256 adac36e4faab7c953354b50391774c9b01379cb4445de52f074464c58d751d1d
MD5 d5f741b0bb991604d5331de863d49d8b
SHA1 1c73d032211696e954259b48c3e83029d7852846
SHA512 a84b1acec34996a5047ff082985510cecf1d381b216e3b02dca2113b16500d417c6f89833ad93a3b1ba96b23cbcc8af5cd5d065fe6235d5273c1c8412538fa30
SSDEEP 3072:CKEiM0DPxUKQf5kv+Tx5DQdqRd+vKWbb1boDu8:WifPxDzvRdMdoh1D8
TLSH
T14F24F703379ED8E0F0923575047C47AE2738F7D61932976B1B61AE89F7322C20E295DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12600

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Niko\documents\visual studio 2013\Projects\QSO J1228+3128\Release\QSO J1228+3128.pdb

kernel32

WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers OutputDebugStringW LCMapStringW DeleteFileA LocalFree CloseHandle CreateToolhelp32Snapshot DeviceIoControl LocalAlloc Process32Next LoadLibraryA SetFileAttributesA GetProcAddress GetConsoleWindow TerminateProcess Sleep OpenProcess WriteFile Process32First GetCurrentProcess CreateFileA GetStringTypeW ExitProcess EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent GetLastError GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte DeleteFileW HeapFree HeapSize SetLastError GetCurrentThreadId HeapAlloc GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc CreateFileW

user32

GetWindowRect GetWindowDC LoadIconA DrawIcon GetDC GetForegroundWindow MessageBoxA SetCursorPos GetDesktopWindow GetCursorPos ShowWindow GetSystemMetrics

gdi32

PatBlt LineTo SetTextColor StretchBlt SetBkColor SelectObject Rectangle Ellipse CreateSolidBrush TextOutA BitBlt

advapi32

AdjustTokenPrivileges RegOpenKeyExA RegCreateKeyExA LookupPrivilegeValueA RegSetValueExA OpenProcessToken RegCloseKey

Sharing