Static task
static1
Behavioral task
behavioral1
Sample
e7c1a9a79ed6530d628e530dea13e31191f3905a83aa12ff9bc8f3e8c8bddf31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7c1a9a79ed6530d628e530dea13e31191f3905a83aa12ff9bc8f3e8c8bddf31.exe
Resource
win10v2004-20220812-en
General
-
Target
e7c1a9a79ed6530d628e530dea13e31191f3905a83aa12ff9bc8f3e8c8bddf31
-
Size
132KB
-
MD5
3efabd2cf74d06993d90f1312af67042
-
SHA1
5befc60a4e584e91af929aa6e55dd33a0bdfc814
-
SHA256
e7c1a9a79ed6530d628e530dea13e31191f3905a83aa12ff9bc8f3e8c8bddf31
-
SHA512
14d70d67e4baa2feb0b2dc21bd3d0b740102593cadc38c0ded5e602a69791336c356bb9ee37477d3126a68d10cc1ccfbc88ffe1663a6dedfd375384b7771e272
-
SSDEEP
3072:LWTOTmOJhO19zQoMeyYX5KHn7g6VfJn5f6KdhWaAJ:LdTmOJh2Snm2tRJny
Malware Config
Signatures
Files
-
e7c1a9a79ed6530d628e530dea13e31191f3905a83aa12ff9bc8f3e8c8bddf31.exe windows x86
a7fb6e3925ae4d61b2c08dbe5ae8e42a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qtcore4
?qMalloc@@YAPAXI@Z
?fromUtf16@QString@@SA?AV1@PBGH@Z
?qMemSet@@YAPAXPAXHI@Z
?qRealloc@@YAPAXPAXI@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?qWinMain@@YAXPAUHINSTANCE__@@0PADHAAHAAV?$QVector@PAD@@@Z
??4QByteArray@@QAEAAV0@PBD@Z
??4QByteArray@@QAEAAV0@ABV0@@Z
??0QByteArray@@QAE@XZ
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?winEventFilter@QCoreApplication@@UAE_NPAUtagMSG@@PAJ@Z
?append@QString@@QAEAAV1@ABV1@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
??1QByteArray@@QAE@XZ
?data@QByteArray@@QAEPADXZ
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?utf16@QString@@QBEPBGXZ
?WindowsVersion@QSysInfo@@2W4WinVersion@1@B
?self@QCoreApplication@@0PAV1@A
??1QString@@QAE@XZ
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?qFree@@YAXPAX@Z
??4QString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@ABV0@@Z
??0QString@@QAE@XZ
?qDebug@@YAXPBDZZ
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?malloc@QVectorData@@SAPAU1@HHHPAU1@@Z
qtgui4
?qt_metacall@QApplication@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?staticMetaObject@QApplication@@2UQMetaObject@@B
?qt_metacast@QApplication@@UAEPAXPBD@Z
?winId@QWidget@@QBEPAUHWND__@@XZ
??1QWidget@@UAE@XZ
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?releaseDC@QWidget@@UBEXPAUHDC__@@@Z
?getDC@QWidget@@UBEPAUHDC__@@XZ
??1QApplication@@UAE@XZ
??0QApplication@@QAE@AAHPAPADW4Type@0@H@Z
?event@QApplication@@MAE_NPAVQEvent@@@Z
?notify@QApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z
?compressEvent@QApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?devType@QWidget@@UBEHXZ
?windowActivationChange@QWidget@@MAEX_N@Z
?fontChange@QWidget@@MAEXABVQFont@@@Z
?paletteChange@QWidget@@MAEXABVQPalette@@@Z
?enabledChange@QWidget@@MAEX_N@Z
?styleChange@QWidget@@MAEXAAVQStyle@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?heightForWidth@QWidget@@UBEHH@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?setVisible@QWidget@@UAEX_N@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?metaObject@QWidget@@UBEPBUQMetaObject@@XZ
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
?windowState@QWidget@@QBE?AV?$QFlags@W4WindowState@Qt@@@@XZ
?setWindowState@QWidget@@QAEXV?$QFlags@W4WindowState@Qt@@@@@Z
?raise@QWidget@@QAEXXZ
?activateWindow@QWidget@@QAEXXZ
?saveState@QApplication@@UAEXAAVQSessionManager@@@Z
?commitData@QApplication@@UAEXAAVQSessionManager@@@Z
?languageChange@QWidget@@MAEXXZ
kernel32
GetCommandLineW
WaitForSingleObject
CreateMutexA
CreateMutexW
ReleaseMutex
CloseHandle
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
user32
SendMessageTimeoutA
FindWindowW
FindWindowA
SendMessageTimeoutW
msvcr80
__dllonexit
??3@YAXPAX@Z
??2@YAPAXI@Z
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
_lock
_onexit
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
__CxxFrameHandler3
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE