0ecf47f22ebd4e8265326dd9149eeae2c8866c761aaba95646a9562ed4b07fc3

Sharing

Copy URL Twitter E-mail

General

Target

0ecf47f22ebd4e8265326dd9149eeae2c8866c761aaba95646a9562ed4b07fc3
Size

81KB
MD5

6c0caf11093f894fd97a74e58d464743
SHA1

1c9761cc2f3b40d6d51b5debdd25e30f8ccdae79
SHA256

0ecf47f22ebd4e8265326dd9149eeae2c8866c761aaba95646a9562ed4b07fc3
SHA512

1d29e657784c908b5e5997c5dc93760cf5cf87891a4d86bcb1a50f1e705c4e365e8e5fc3c2ae641294a9139c6850bb3372b0bc4e36a633477a3f9484c456c96f
SSDEEP

1536:St8VSyxqcK2OKO5b8Rd/sqg13uSrHjXRmcjDdHpEkM9LvymJgvL0jeYRy:SteSqqcLOKO54Rb0rjRptHakM9ryN8fy

Score

N/A

Malware Config

Signatures

Files

0ecf47f22ebd4e8265326dd9149eeae2c8866c761aaba95646a9562ed4b07fc3
.dll windows x86

1f11a995ce0d5d7814317fe5e603d48a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qtsvg4

?render@QSvgRenderer@@QAEXPAVQPainter@@ABVQRectF@@@Z
??0QSvgRenderer@@QAE@PAVQObject@@@Z
?viewBox@QSvgRenderer@@QBE?AVQRect@@XZ
?load@QSvgRenderer@@QAE_NPAVQXmlStreamReader@@@Z
??1QSvgRenderer@@UAE@XZ
?load@QSvgRenderer@@QAE_NABVQByteArray@@@Z

qtxml4

??0QXmlStreamReader@@QAE@XZ
?setDevice@QXmlStreamReader@@QAEXPAVQIODevice@@@Z
??1QXmlStreamReader@@QAE@XZ

qtgui4

??4QColor@@QAEAAV0@ABV0@@Z
??BQColor@@QBE?AVQVariant@@XZ
??0QTransform@@QAE@XZ
?translate@QTransform@@QAEAAV1@NN@Z
?scale@QTransform@@QAEAAV1@NN@Z
?mapRect@QTransform@@QBE?AVQRectF@@ABV2@@Z
??0QImage@@QAE@ABVQSize@@W4Format@0@@Z
??4QImage@@QAEAAV0@ABV0@@Z
??1QImage@@UAE@XZ
?rgba@QColor@@QBEIXZ
?fill@QImage@@QAEXI@Z
??0QPainter@@QAE@PAVQPaintDevice@@@Z
?end@QPainter@@QAE_NXZ
??1QPainter@@QAE@XZ
?format@QImageIOHandler@@QBE?AVQByteArray@@XZ
?invalidate@QColor@@AAEXXZ
?device@QImageIOHandler@@QBEPAVQIODevice@@XZ
?setFormat@QImageIOHandler@@QBEXABVQByteArray@@@Z
?currentImageRect@QImageIOHandler@@UBE?AVQRect@@XZ
?currentImageNumber@QImageIOHandler@@UBEHXZ
?nextImageDelay@QImageIOHandler@@UBEHXZ
?imageCount@QImageIOHandler@@UBEHXZ
?loopCount@QImageIOHandler@@UBEHXZ
?jumpToImage@QImageIOHandler@@UAE_NH@Z
?jumpToNextImage@QImageIOHandler@@UAE_NXZ
?write@QImageIOHandler@@UAE_NABVQImage@@@Z
??0QImageIOHandler@@QAE@XZ
??1QImageIOHandler@@UAE@XZ
??0QColor@@QAE@W4GlobalColor@Qt@@@Z
??1QImageIOPlugin@@UAE@XZ
?qt_metacall@QImageIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QImageIOPlugin@@UAEPAXPBD@Z
?metaObject@QImageIOPlugin@@UBEPBUQMetaObject@@XZ
??0QImageIOPlugin@@QAE@PAVQObject@@@Z
?setDevice@QImageIOHandler@@QAEXPAVQIODevice@@@Z
?setFormat@QImageIOHandler@@QAEXABVQByteArray@@@Z

qtcore4

?toRect@QVariant@@QBE?AVQRect@@XZ
?toSize@QVariant@@QBE?AVQSize@@XZ
??0QVariant@@QAE@H@Z
??0QVariant@@QAE@ABVQSize@@@Z
??0QVariant@@QAE@ABVQRect@@@Z
??0QVariant@@QAE@ABV0@@Z
??1QVariant@@QAE@XZ
??0QVariant@@QAE@XZ
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?shared_null@QListData@@2UData@1@A
?removeGuard@QMetaObject@@SAXPAPAVQObject@@@Z
?changeGuard@QMetaObject@@SAXPAPAVQObject@@PAV2@@Z
??0QString@@QAE@ABV0@@Z
?free@QString@@CAXPAUData@1@@Z
?isReadable@QIODevice@@QBE_NXZ
?qFree@@YAXPAX@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?append@QListData@@QAEPAPAXXZ
??1QString@@QAE@XZ
?fromLatin1_helper@QString@@CAPAUData@1@PBDH@Z
?handler@QVariant@@1PBUHandler@1@B
??1QByteArray@@QAE@XZ
?contains@QByteArray@@QBE?AVQBool@@PBD@Z
??0QByteArray@@QAE@PBD@Z
?startsWith@QByteArray@@QBE_NPBD@Z
?peek@QIODevice@@QAE?AVQByteArray@@_J@Z
?constData@QVariant@@QBEPBXXZ
?userType@QVariant@@QBEHXZ
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z
?staticMetaObject@QBuffer@@2UQMetaObject@@B
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?fromRawData@QByteArray@@SA?AV1@PBDH@Z
?data@QBuffer@@QBEABVQByteArray@@XZ

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_CxxThrowException
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

qt_plugin_instance
qt_plugin_query_verification_data

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f11a995ce0d5d7814317fe5e603d48a

Headers

File Characteristics

Imports

qtsvg4

qtxml4

qtgui4

qtcore4

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 60KB - Virtual size: 61KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 60KB - Virtual size: 61KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB