General

  • Target
    azahar-windows-mxe-2126.1.2-installer.exe
  • Size 45.9MB
  • Sample261002-ka6zcsstct
  • SHA256 87da5b51d11976268ec8cd9cd0079b69ac265766a82e793ec731d5fa71b43da5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 2 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 69 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • azahar-windows-mxe-2126.1.2-installer.exe
    .exe 45.9MB
  • $PLUGINSDIR/LangDLL.dll
    .dll 8KB
  • $PLUGINSDIR/System.dll
    .dll 24KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 7KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 14KB
  • OpenAL32.dll
    .dll 2.3MB
  • Qt6Concurrent.dll
    .dll 83KB
  • Qt6Core.dll
    .dll 7.8MB
  • Qt6Gui.dll
    .dll 10.4MB
  • Qt6Multimedia.dll
    .dll 2.0MB
  • Qt6Network.dll
    .dll 7.2MB
  • Qt6Widgets.dll
    .dll 8.3MB
  • azahar-room.exe
    .exe 3.7MB
  • azahar.exe
    .exe 36.5MB
  • icudt74.dll
    .dll 29.4MB
  • icuin74.dll
    .dll 4.9MB
  • icuuc74.dll
    .dll 2.9MB
  • libbrotlicommon.dll
    .dll .js 192KB
  • libbrotlidec.dll
    .dll 109KB
  • libbz2.dll
    .dll 279KB
  • libc++.dll
    .dll 1.2MB
  • libfreetype-6.dll
    .dll 3.9MB
  • libglib-2.0-0.dll
    .dll 2.0MB
  • libharfbuzz-0.dll
    .dll 1.6MB
  • libiconv-2.dll
    .dll 1.3MB
  • libintl-8.dll
    .dll 1.2MB
  • libpcre2-16-0.dll
    .dll 439KB
  • libpcre2-8-0.dll
    .dll 471KB
  • libpng16-16.dll
    .dll 1.1MB
  • libunwind.dll
    .dll 51KB
  • libzstd.dll
    .dll 1.0MB
  • plugins/designer/qquickwidget.dll
    .dll 92KB
  • plugins/generic/qtuiotouchplugin.dll
    .dll 155KB
  • plugins/iconengines/qsvgicon.dll
    .dll 122KB
  • plugins/imageformats/qgif.dll
    .dll 97KB
  • plugins/imageformats/qico.dll
    .dll 101KB
  • plugins/imageformats/qjpeg.dll
    .dll 125KB
  • plugins/imageformats/qsvg.dll
    .dll 90KB
  • plugins/multimedia/ffmpegmediaplugin.dll
    .dll 987KB
  • plugins/multimedia/windowsmediaplugin.dll
    .dll 1.2MB
  • plugins/networkinformation/qnetworklistmanager.dll
    .dll 509KB
  • plugins/platforms/qdirect2d.dll
    .dll 2.1MB
  • plugins/platforms/qminimal.dll
    .dll 102KB
  • plugins/platforms/qoffscreen.dll
    .dll 201KB
  • plugins/platforms/qwindows.dll
    .dll 1.9MB
  • plugins/qmltooling/qmldbg_debugger.dll
    .dll 335KB
  • plugins/qmltooling/qmldbg_inspector.dll
    .dll 195KB
  • plugins/qmltooling/qmldbg_local.dll
    .dll 89KB
  • plugins/qmltooling/qmldbg_messages.dll
    .dll 88KB
  • plugins/qmltooling/qmldbg_native.dll
    .dll 104KB
  • plugins/qmltooling/qmldbg_nativedebugger.dll
    .dll 128KB
  • plugins/qmltooling/qmldbg_preview.dll
    .dll 345KB
  • plugins/qmltooling/qmldbg_profiler.dll
    .dll 192KB
  • plugins/qmltooling/qmldbg_quickeventreplay.dll
    .dll 98KB
  • plugins/qmltooling/qmldbg_quickprofiler.dll
    .dll 96KB
  • plugins/qmltooling/qmldbg_server.dll
    .dll 188KB
  • plugins/qmltooling/qmldbg_tcp.dll
    .dll 86KB
  • plugins/sqldrivers/qsqlite.dll
    .dll 174KB
  • plugins/sqldrivers/qsqlmysql.dll
    .dll 164KB
  • plugins/sqldrivers/qsqlodbc.dll
    .dll 226KB
  • plugins/styles/qmodernwindowsstyle.dll
    .dll 344KB
  • plugins/tls/qcertonlybackend.dll
    .dll 165KB
  • plugins/tls/qopensslbackend.dll
    .dll 6.1MB
  • plugins/tls/qschannelbackend.dll
    .dll 353KB
  • scripting/citra.py
    5KB
  • tests.exe
    .exe 29.4MB
  • uninst.exe
    .exe 622KB
  • $PLUGINSDIR/System.dll
    .dll 24KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 7KB
  • zlib1.dll
    .dll 97KB

azahar-windows-mxe-2126.1.2-installer.exe

  • IMPHASH 6169175a0a7af2b9c8a2e2eac3911bf6
  • SHA256 87da5b51d11976268ec8cd9cd0079b69ac265766a82e793ec731d5fa71b43da5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
15610
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths