109e80e3bb8e38b5afa14d01e05b50ee0a732dbe7e496cf5d5b986f126229830

Sharing

Copy URL Twitter E-mail

General

Target

109e80e3bb8e38b5afa14d01e05b50ee0a732dbe7e496cf5d5b986f126229830
Size

383KB
MD5

7283e56de10b9b0c44757f364b094a70
SHA1

ee6545aa01b7d403d4e2705c29e185b176b8511c
SHA256

109e80e3bb8e38b5afa14d01e05b50ee0a732dbe7e496cf5d5b986f126229830
SHA512

6090044b1c81f894f8e3faafdac95511d78b97bf4ccbaa87706743bb8b7ea8cf36ad1ae2dd226427ae75fbf605a20ceca440cf26b473dd03b0a13a5bc3bd541c
SSDEEP

6144:M128NbvLx5gOK7b+IV4EWKdUQIDIW7/jS5XUwf:U3zKdVIDx7/jSlr

Score

N/A

Malware Config

Signatures

Files

109e80e3bb8e38b5afa14d01e05b50ee0a732dbe7e496cf5d5b986f126229830
.dll windows x86

e0b36bc16a83f8eb3cd6eec37f7d9055

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qtgui4

?setDevice@QImageIOHandler@@QAEXPAVQIODevice@@@Z
?setFormat@QImageIOHandler@@QAEXABVQByteArray@@@Z
??1QImageIOPlugin@@UAE@XZ
?qt_metacall@QImageIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QImageIOPlugin@@UAEPAXPBD@Z
?metaObject@QImageIOPlugin@@UBEPBUQMetaObject@@XZ
??0QImageIOPlugin@@QAE@PAVQObject@@@Z
?currentImageRect@QImageIOHandler@@UBE?AVQRect@@XZ
?jumpToImage@QImageIOHandler@@UAE_NH@Z
?jumpToNextImage@QImageIOHandler@@UAE_NXZ
??0QImageIOHandler@@QAE@XZ
??1QImageIOHandler@@UAE@XZ
?setFormat@QImageIOHandler@@QBEXABVQByteArray@@@Z
?detach@QImage@@QAEXXZ
?bytesPerLine@QImage@@QBEHXZ
?isNull@QImage@@QBE_NXZ
??0QImage@@QAE@HHW4Format@0@@Z
??4QImage@@QAEAAV0@ABV0@@Z
?byteCount@QImage@@QBEHXZ
?width@QImage@@QBEHXZ
?height@QImage@@QBEHXZ
?bits@QImage@@QAEPAEXZ
?device@QImageIOHandler@@QBEPAVQIODevice@@XZ
?scanLine@QImage@@QAEPAEH@Z
??1QImage@@UAE@XZ
??0QImage@@QAE@XZ

qtcore4

?shared_null@QString@@0UData@1@A
?free@QString@@CAXPAUData@1@@Z
??4QByteArray@@QAEAAV0@ABV0@@Z
??0QVariant@@QAE@_N@Z
??1QVariant@@QAE@XZ
??0QVariant@@QAE@ABV0@@Z
??0QVariant@@QAE@XZ
??0QVariant@@QAE@ABVQSize@@@Z
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?shared_null@QListData@@2UData@1@A
?removeGuard@QMetaObject@@SAXPAPAVQObject@@@Z
?changeGuard@QMetaObject@@SAXPAPAVQObject@@PAV2@@Z
??0QString@@QAE@ABV0@@Z
?isReadable@QIODevice@@QBE_NXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?append@QListData@@QAEPAPAXXZ
?fromLatin1_helper@QString@@CAPAUData@1@PBDH@Z
??1QString@@QAE@XZ
?grow@QVectorData@@SAHHHH_N@Z
?read@QIODevice@@QAE?AVQByteArray@@_J@Z
?append@QByteArray@@QAEAAV1@ABV1@@Z
?qFree@@YAXPAX@Z
?remove@QByteArray@@QAEAAV1@HH@Z
??1QByteArray@@QAE@XZ
?reallocate@QVectorData@@SAPAU1@PAU1@HHH@Z
?allocate@QVectorData@@SAPAU1@HH@Z
?qBadAlloc@@YAXXZ
?free@QVectorData@@SAXPAU1@H@Z
?shared_null@QVectorData@@2U1@A
??0QByteArray@@QAE@PBD@Z
?qWarning@@YAXPBDZZ
?peek@QIODevice@@QAE_JPAD_J@Z
?shared_null@QByteArray@@0UData@1@A

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??2@YAPAXI@Z
memset
_CxxThrowException
__CxxFrameHandler3
memcpy
??3@YAXPAX@Z
??_V@YAXPAX@Z
strncmp
free

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

qt_plugin_instance
qt_plugin_query_verification_data

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e0b36bc16a83f8eb3cd6eec37f7d9055

Headers

DLL Characteristics

File Characteristics

Imports

qtgui4

qtcore4

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 357KB - Virtual size: 360KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 357KB - Virtual size: 360KB