Static task
static1
Behavioral task
behavioral1
Sample
eeb3c8b9aee8136030f234feb801a3a8f8d91a97bd3fbee14330b35713ff0edd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eeb3c8b9aee8136030f234feb801a3a8f8d91a97bd3fbee14330b35713ff0edd.exe
Resource
win10v2004-20220901-en
General
-
Target
eeb3c8b9aee8136030f234feb801a3a8f8d91a97bd3fbee14330b35713ff0edd
-
Size
178KB
-
MD5
3d6b6fefc9f30409c0138ba4bb3831b0
-
SHA1
0b0a4b5367b87f82240248c00dd4cc90ac876349
-
SHA256
eeb3c8b9aee8136030f234feb801a3a8f8d91a97bd3fbee14330b35713ff0edd
-
SHA512
c12b674b323217067c9bc4073a201f49c56e103329093d4bf937c31273c0d2aef1f11954e9d449fca81040e919a40bc4aae200455f0c5e410dc95848836fb714
-
SSDEEP
3072:xW9cZgzGUEm8amwlBEAp/SrOqyzoI7h+aS1GD3H4/Bi4djJv3dMo9YYy7El:aK4BEo6rOqyzo0naGQBi49Jv3dF9ygl
Malware Config
Signatures
Files
-
eeb3c8b9aee8136030f234feb801a3a8f8d91a97bd3fbee14330b35713ff0edd.exe windows x86
9303ff9e29aa7fad295bd6a8ac54789c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qtcore4
??0QFile@@QAE@ABVQString@@@Z
?metaObject@QFile@@UBEPBUQMetaObject@@XZ
?qt_metacast@QFile@@UAEPAXPBD@Z
?qt_metacall@QFile@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?isSequential@QFile@@UBE_NXZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?close@QFile@@UAEXXZ
?pos@QFile@@UBE_JXZ
?size@QFile@@UBE_JXZ
?seek@QFile@@UAE_N_J@Z
?atEnd@QFile@@UBE_NXZ
?readData@QFile@@MAE_JPAD_J@Z
?readLineData@QFile@@MAE_JPAD_J@Z
?writeData@QFile@@MAE_JPBD_J@Z
?fileEngine@QFile@@UBEPAVQAbstractFileEngine@@XZ
??1QFile@@UAE@XZ
??0QDateTime@@QAE@ABVQDate@@ABVQTime@@W4TimeSpec@Qt@@@Z
??0QDate@@QAE@HHH@Z
??0QTime@@QAE@HHHH@Z
?toUnicode@QTextCodec@@QBE?AVQString@@PBD@Z
??0QByteArray@@QAE@HD@Z
?errorString@QIODevice@@QBE?AVQString@@XZ
?write@QIODevice@@QAE_JPBD_J@Z
?read@QIODevice@@QAE_JPAD_J@Z
deflate
deflateEnd
??0QFileInfo@@QAE@ABV0@@Z
?setFileName@QFile@@QAEXABVQString@@@Z
??0QFile@@QAE@XZ
?remove@QFile@@SA_NABVQString@@@Z
?mkpath@QDir@@QBE_NABVQString@@@Z
?isDir@QFileInfo@@QBE_NXZ
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
?isFile@QFileInfo@@QBE_NXZ
?entryInfoList@QDir@@QBE?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?exists@QDir@@QBE_NXZ
??YQString@@QAEAAV0@VQChar@@@Z
??1QSettings@@UAE@XZ
?endGroup@QSettings@@QAEXXZ
??1QVariant@@QAE@XZ
?toString@QVariant@@QBE?AVQString@@XZ
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
??0QVariant@@QAE@XZ
?beginGroup@QSettings@@QAEXABVQString@@@Z
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?lastIndexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
?separator@QDir@@SA?AVQChar@@XZ
?tempPath@QDir@@SA?AVQString@@XZ
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
??1QTextStream@@UAE@XZ
?readLine@QTextStream@@QAE?AVQString@@_J@Z
?atEnd@QTextStream@@QBE_NXZ
??0QTextStream@@QAE@PAVQIODevice@@@Z
?setFilter@QDir@@QAEXV?$QFlags@W4Filter@QDir@@@@@Z
??8QString@@QBE_NABVQLatin1String@@@Z
?codecForCStrings@QString@@0PAVQTextCodec@@A
?fromAscii@QChar@@SA?AV1@D@Z
?mkdir@QDir@@QBE_NABVQString@@@Z
?right@QString@@QBE?AV1@H@Z
?exists@QDir@@QBE_NABVQString@@@Z
?setCurrent@QDir@@SA_NABVQString@@@Z
?currentPath@QDir@@SA?AVQString@@XZ
?setPermissions@QFile@@SA_NABVQString@@V?$QFlags@W4Permission@QFile@@@@@Z
?copy@QFile@@SA_NABVQString@@0@Z
?exists@QFile@@SA_NABVQString@@@Z
??0QFileInfo@@QAE@ABVQDir@@ABVQString@@@Z
?isSymLink@QFileInfo@@QBE_NXZ
?path@QDir@@QBE?AVQString@@XZ
?convertSeparators@QDir@@SA?AVQString@@ABV2@@Z
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?filePath@QFileInfo@@QBE?AVQString@@XZ
?rmdir@QDir@@QBE_NABVQString@@@Z
?qt_metacast@QIODevice@@UAEPAXPBD@Z
?qt_metacall@QIODevice@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?staticMetaObject@QIODevice@@2UQMetaObject@@B
?resize@QByteArray@@QAEXH@Z
?detach@QByteArray@@QAEXXZ
?toUnicode@QTextCodec@@QBE?AVQString@@ABVQByteArray@@@Z
?codecForLocale@QTextCodec@@SAPAV1@XZ
?fileName@QFileInfo@@QBE?AVQString@@XZ
??8QString@@QBE_NPBD@Z
?detach@QListData@@QAEPAUData@1@H@Z
?toLower@QString@@QBE?AV1@XZ
?relativeFilePath@QDir@@QBE?AVQString@@ABV2@@Z
??0QDir@@QAE@ABVQString@@@Z
??4QByteArray@@QAEAAV0@ABV0@@Z
??8QString@@QBE_NABV0@@Z
?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?bytesAvailable@QIODevice@@UBE_JXZ
?fromUnicode@QTextCodec@@QBE?AVQByteArray@@ABVQString@@@Z
?qFree@@YAXPAX@Z
?setOpenMode@QIODevice@@IAEXV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?openMode@QIODevice@@QBE?AV?$QFlags@W4OpenModeFlag@QIODevice@@@@XZ
?setErrorString@QIODevice@@IAEXABVQString@@@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?arg@QString@@QBE?AV1@HHHABVQChar@@@Z
?isOpen@QIODevice@@QBE_NXZ
?qWarning@@YAXPBDZZ
??0QIODevice@@QAE@PAVQObject@@@Z
?readLineData@QIODevice@@MAE_JPAD_J@Z
?waitForBytesWritten@QIODevice@@UAE_NH@Z
?waitForReadyRead@QIODevice@@UAE_NH@Z
?canReadLine@QIODevice@@UBE_NXZ
?bytesToWrite@QIODevice@@UBE_JXZ
?reset@QIODevice@@UAE_NXZ
?seek@QIODevice@@UAE_N_J@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
??1QIODevice@@UAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
?mid@QString@@QBE?AV1@HH@Z
?tr@QMetaObject@@QBE?AVQString@@PBD0@Z
??0QDateTime@@QAE@XZ
?exists@QFileInfo@@QBE_NXZ
??1QDateTime@@QAE@XZ
??4QDateTime@@QAEAAV0@ABV0@@Z
??1QByteArray@@QAE@XZ
??0QString@@QAE@ABV0@@Z
?shared_null@QString@@0UData@1@A
?shared_null@QByteArray@@0UData@1@A
inflateInit2_
get_crc_table
inflate
inflateEnd
crc32
??0QCoreApplication@@QAE@AAHPAPAD@Z
??1QCoreApplication@@UAE@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?exec@QCoreApplication@@SAHXZ
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
??0QFileInfo@@QAE@ABVQString@@@Z
?absoluteDir@QFileInfo@@QBE?AVQDir@@XZ
??1QFileInfo@@QAE@XZ
?free@QString@@CAXPAUData@1@@Z
?absolutePath@QDir@@QBE?AVQString@@XZ
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1QDir@@QAE@XZ
??1QString@@QAE@XZ
msvcp90
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr90
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
_CxxThrowException
scanf
exit
__CxxFrameHandler3
memset
memcpy
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
sprintf
_wassert
tolower
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_vsnprintf
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
free
_controlfp_s
_invoke_watson
kernel32
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetSystemTimeAsFileTime
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE