cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d

General

Target
cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d
Size 3.8MB
Sample260825-x545gaaf68
SHA256 cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d
MD5 118fa34904b459c586de339846b1294c
SHA1 2aa6ae15e1c313b94a7c3f939697bcec03e94b90
SHA512 bf382e71ec3188fe49daa61f2058e5899be763e5ccadf6b617047a086877cbac258f42dcec1e1c9b9ec6070e9440f9a8790aad5b7ada0077d4f0b0b09dcaa3a8
SSDEEP 98304:Ht5ub+pS5yh6QU5qRJ4rrxwLSl8k9Tj2S:HtrpS586scPxORw2
TLSH
T18306339CBF99E112D52EB6351200F3512630EE961C78549E37E3BF8FAE7E9094637242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d

File Explorer

cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d

.exe 3.8MB

cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d

IMPHASH 11d2e14818c354b129f8b0306c7b4686
SHA256 cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d
MD5 118fa34904b459c586de339846b1294c
SHA1 2aa6ae15e1c313b94a7c3f939697bcec03e94b90
SHA512 bf382e71ec3188fe49daa61f2058e5899be763e5ccadf6b617047a086877cbac258f42dcec1e1c9b9ec6070e9440f9a8790aad5b7ada0077d4f0b0b09dcaa3a8
SSDEEP 98304:Ht5ub+pS5yh6QU5qRJ4rrxwLSl8k9Tj2S:HtrpS586scPxORw2
TLSH
T18306339CBF99E112D52EB6351200F3512630EE961C78549E37E3BF8FAE7E9094637242
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8391408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetModuleHandleA GetProcAddress

advapi32

RegEnumKeyA

shell32

CommandLineToArgvW

qt5network

??0QNetworkRequest@@QAE@XZ

qt5widgets

??1QMenu@@UAE@XZ

qt5gui

??1QIcon@@QAE@XZ

qt5core

?qrand@@YAHXZ

msvcp140

?good@ios_base@std@@QBE_NXZ

msi

ord87

bcrypt

BCryptEncrypt

vcruntime140

memset

api-ms-win-crt-stdio-l1-1-0

_dup

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-filesystem-l1-1-0

rename

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

ceil

api-ms-win-crt-locale-l1-1-0

setlocale

crypt32

CertOpenStore

ws2_32

gethostname

setupapi

SetupDiGetClassDevsW

iphlpapi

if_nametoindex

secur32

InitSecurityInterfaceW

user32

MessageBoxW

Sharing

General

Malware Config

Signatures

File Explorer

cdd9b5691cde207c5f78e31f3000990d503888706bfbd82bfdda7090c74eaf0d

kernel32

advapi32

shell32

qt5network

qt5widgets

qt5gui

qt5core

msvcp140

msi

bcrypt

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

crypt32

ws2_32

setupapi

iphlpapi

secur32

user32

generic