_getPlugin
Static task
static1
Behavioral task
behavioral1
Sample
a48d74af4ce7353c3432329235804a863cb9f0fbd66f928b1083601e782980b1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a48d74af4ce7353c3432329235804a863cb9f0fbd66f928b1083601e782980b1.dll
Resource
win10v2004-20220812-en
General
-
Target
a48d74af4ce7353c3432329235804a863cb9f0fbd66f928b1083601e782980b1
-
Size
320KB
-
MD5
4bce94c649b24b854d147de2d7116342
-
SHA1
cb35d8a36737e431852f6b596525833a53254b90
-
SHA256
a48d74af4ce7353c3432329235804a863cb9f0fbd66f928b1083601e782980b1
-
SHA512
a023676cdd21aa9d8abbb55a370f7e053dbcdb07b6a0403b6f60c27c7a2bc2f20795d51d57cddcac8a040dbb695ec266f135c97e6243987f56a4593f5ed2d42d
-
SSDEEP
6144:7E/58uDACdEmOgDkNKACHgGJT1wySZdMwgkFHQF9oJqblxATGyupqSV:7kvgNKomwyuQbl2T5SV
Malware Config
Signatures
Files
-
a48d74af4ce7353c3432329235804a863cb9f0fbd66f928b1083601e782980b1.dll windows x86
4ac4167bd494d7ae93d72944cc8d6b19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qtcore4
?hasShrunk@QHashData@@QAEXXZ
?rehash@QHashData@@QAEXH@Z
??0QVariant@@QAE@ABV0@@Z
??8QString@@QBE_NABV0@@Z
?insert@QListData@@QAEPAPAXH@Z
??0QVariant@@QAE@ABV?$QList@VQVariant@@@@@Z
??YQString@@QAEAAV0@PBD@Z
??4QString@@QAEAAV0@PBD@Z
??1QByteArray@@QAE@XZ
?exists@QFile@@SA_NABVQString@@@Z
??0QVariant@@QAE@XZ
?fromUtf16@QString@@SA?AV1@PBGH@Z
?trimmed@QString@@QBE?AV1@XZ
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
??0QString@@QAE@ABVQByteArray@@@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
??1QFile@@UAE@XZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QFile@@QAE@ABVQString@@@Z
?qRegisterResourceData@@YA_NHPBE00@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
??0QVariant@@QAE@_J@Z
?toUInt@QVariant@@QBEIPA_N@Z
?toLongLong@QVariant@@QBE_JPA_N@Z
??0QDateTime@@QAE@ABV0@@Z
??0QString@@QAE@ABV0@@Z
??0QDateTime@@QAE@XZ
?userType@QVariant@@QBEHXZ
?constData@QVariant@@QBEPBXXZ
?allocateNode@QHashData@@QAEPAXXZ
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZH@Z
?qt_assert@@YAXPBD0H@Z
?destroyAndFree@QHashData@@QAEXXZ
??0QVariant@@QAE@ABVQDateTime@@@Z
??4QVariant@@QAEAAV0@ABV0@@Z
?isNull@QVariant@@QBE_NXZ
?handler@QVariant@@1PBUHandler@1@B
?toInt@QVariant@@QBEHPA_N@Z
?freeNode@QHashData@@QAEXPAX@Z
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?shared_null@QHashData@@2U1@A
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?toString@QVariant@@QBE?AVQString@@XZ
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
?path@QUrl@@QBE?AVQString@@XZ
??1QUrl@@QAE@XZ
??0QChar@@QAE@D@Z
?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?toDateTime@QVariant@@QBE?AVQDateTime@@XZ
?mid@QString@@QBE?AV1@HH@Z
??1QDateTime@@QAE@XZ
??0QVariant@@QAE@_K@Z
??8QString@@QBE_NPBD@Z
?shared_null@QString@@0UData@1@A
?append@QListData@@QAEPAPAXXZ
?detach2@QListData@@QAEPAUData@1@XZ
?qFree@@YAXPAX@Z
??0QVariant@@QAE@H@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?free@QString@@CAXPAUData@1@@Z
??0QVariant@@QAE@ABVQString@@@Z
??1QVariant@@QAE@XZ
?toULongLong@QVariant@@QBE_KPA_N@Z
??1QString@@QAE@XZ
?shared_null@QListData@@2UData@1@A
??4QString@@QAEAAV0@ABV0@@Z
qtsql4
?value@QSqlRecord@@QBE?AVQVariant@@ABVQString@@@Z
??1QSqlDatabase@@QAE@XZ
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z
?open@QSqlDatabase@@QAE_NXZ
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z
?setConnectOptions@QSqlDatabase@@QAEXABVQString@@@Z
?close@QSqlDatabase@@QAEXXZ
??0QSqlDatabase@@QAE@XZ
??4QSqlDatabase@@QAEAAV0@ABV0@@Z
?removeDatabase@QSqlDatabase@@SAXABVQString@@@Z
?finish@QSqlQuery@@QAEXXZ
?execBatch@QSqlQuery@@QAE_NW4BatchExecutionMode@1@@Z
??0QSqlQuery@@QAE@ABV0@@Z
?isOpen@QSqlDatabase@@QBE_NXZ
?transaction@QSqlDatabase@@QAE_NXZ
?next@QSqlQuery@@QAE_NXZ
?record@QSqlQuery@@QBE?AVQSqlRecord@@XZ
?numRowsAffected@QSqlQuery@@QBEHXZ
??1QSqlRecord@@QAE@XZ
?rollback@QSqlDatabase@@QAE_NXZ
?commit@QSqlDatabase@@QAE_NXZ
?lastInsertId@QSqlQuery@@QBE?AVQVariant@@XZ
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z
?prepare@QSqlQuery@@QAE_NABVQString@@@Z
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?exec@QSqlQuery@@QAE_NXZ
?value@QSqlQuery@@QBE?AVQVariant@@H@Z
??1QSqlQuery@@QAE@XZ
??0QSqlDatabase@@QAE@ABV0@@Z
shell32
SHGetFolderPathW
dpxlibrary
?getApplicationDataPath@OSUtilities@DivXPlayerX@@SA?AVQString@@XZ
msvcp80
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
msvcr80
_initterm_e
_decode_pointer
_adjust_fdiv
__CppXcptFilter
_initterm
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_onexit
_lock
_encoded_null
free
_crt_debugger_hook
_malloc_crt
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
__RTDynamicCast
_unlock
__dllonexit
_amsg_exit
_encode_pointer
kernel32
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
IsDebuggerPresent
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE