9795c162f69111b2da9cc37c49277de4882b150cf51b93da523576308612f4b9

Sharing

Copy URL Twitter E-mail

General

Target

9795c162f69111b2da9cc37c49277de4882b150cf51b93da523576308612f4b9
Size

710KB
MD5

0bc18e58b2aafb648c828bcbdacc4710
SHA1

1c944ca9670f42710e79bdccc109619c81893ab4
SHA256

9795c162f69111b2da9cc37c49277de4882b150cf51b93da523576308612f4b9
SHA512

5906c3ae593fe06554a5bed4923712ff62f8dd932865aabaa3ea62acfbab8048850e067d5b2bdbc0ccfca991e4d23739b397c6597a35926ce77fe7020ecc1b5e
SSDEEP

12288:+Mn0r9lGEaG56HMQh8nvo6NE/TlP/7guqwJ+yepTnEZpgyCC2monxIjrmrdp5fO:+s0r9lGxG56HMQh8vo6NY2DEZuynQxIa

Score

N/A

Malware Config

Signatures

Files

9795c162f69111b2da9cc37c49277de4882b150cf51b93da523576308612f4b9
.exe windows x86

1cbdba394c99e15c7624b61b0e2ddaf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetVersionExW
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte

mingwm10

__mingwthr_key_dtor

msvcrt

_fdopen
_fstat
_lseek
_read
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filbuf
_flsbuf
_iob
_isctype
_onexit
_pctype
_setmode
_snwprintf
abort
atexit
atof
atoi
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
getwc
iswctype
localeconv
malloc
memchr
memmove
putwc
rand
realloc
setlocale
setvbuf
signal
sprintf
sscanf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strxfrm
tolower
towlower
towupper
ungetc
ungetwc
wcschr
wcscoll
wcsftime
wcslen
wcsxfrm

shell32

SHGetFolderPathA

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
__udivdi3
__umoddi3

qtcore4

_Z5qFreePv
_Z5qrandv
_Z6qDebugPKcz
_Z6qsrandj
_ZN10QByteArray7reallocEi
_ZN10QByteArrayC1EPKc
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN10QTextCodec17setCodecForLocaleEPS_
_ZN10QTextCodec4cftrE
_ZN14QReadWriteLock11lockForReadEv
_ZN14QReadWriteLock12lockForWriteEv
_ZN14QReadWriteLock6unlockEv
_ZN14QReadWriteLockC1Ev
_ZN14QReadWriteLockD1Ev
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication4execEv
_ZN16QCoreApplication9argumentsEv
_ZN16QCoreApplicationC1ERiPPc
_ZN16QCoreApplicationD1Ev
_ZN4QDir8homePathEv
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN5QCharC1Ec
_ZN5QFile11permissionsERK7QString
_ZN5QFile11setFileNameERK7QString
_ZN5QFile14setPermissionsERK7QString6QFlagsINS_10PermissionEE
_ZN5QFile4copyERK7QStringS2_
_ZN5QFile4linkERK7QStringS2_
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFile5flushEv
_ZN5QFile6existsERK7QString
_ZN5QFile6removeERK7QString
_ZN5QFile6renameERK7QStringS2_
_ZN5QFileC1Ev
_ZN5QFileD1Ev
_ZN5QTime11currentTimeEv
_ZN5QTimeC1Eiiii
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10startTimerEi
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString11shared_nullE
_ZN7QString13fromLocal8BitEPKci
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString4growEi
_ZN7QString6appendERKS_
_ZN7QString7reallocEi
_ZN7QString7replaceE5QCharRKS_N2Qt15CaseSensitivityE
_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE
_ZN7QString7replaceEiiRKS_
_ZN7QString7sprintfEPKcz
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN8QProcess13startDetachedERK7QString
_ZN8QProcess7executeERK7QString
_ZN8QVariantC1EPKc
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Ei
_ZN8QVariantC1EiPKvj
_ZN8QVariantC1Ej
_ZN8QVariantC1Ex
_ZN8QVariantD1Ev
_ZN8QVariantaSERKS_
_ZN9QDateTime10fromStringERK7QStringS2_
_ZN9QDateTime10fromTime_tEj
_ZN9QDateTime15currentDateTimeEv
_ZN9QDateTimeD1Ev
_ZN9QFileInfo7setFileERK7QString
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoC1ERKS_
_ZN9QFileInfoC1Ev
_ZN9QFileInfoD1Ev
_ZN9QFileInfoaSERKS_
_ZN9QIODevice5writeEPKc
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData7detach3Ev
_ZNK10QTextCodec9toUnicodeEPKc
_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK4QDir5mkdirERK7QString
_ZNK4QDir6existsEv
_ZNK4QDir6mkpathERK7QString
_ZNK4QDir9entryListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK5QFile4sizeEv
_ZNK5QTime6secsToERKS_
_ZNK7QString11lastIndexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString11toLocal8BitEv
_ZNK7QString12toWCharArrayEPw
_ZNK7QString4leftEi
_ZNK7QString5toIntEPbi
_ZNK7QString6toUIntEPbi
_ZNK7QString6toUtf8Ev
_ZNK7QString7toAsciiEv
_ZNK7QString8endsWithERK5QCharN2Qt15CaseSensitivityE
_ZNK7QString8endsWithERKS_N2Qt15CaseSensitivityE
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
_ZNK8QVariant5toIntEPb
_ZNK8QVariant6isNullEv
_ZNK8QVariant6toBoolEv
_ZNK8QVariant6toUIntEPb
_ZNK8QVariant8toStringEv
_ZNK9QDateTime8toStringERK7QString
_ZNK9QDateTime8toTime_tEv
_ZNK9QFileInfo16absoluteFilePathEv
_ZNK9QFileInfo5isDirEv
_ZNK9QFileInfo6existsEv
_ZNK9QFileInfo8fileNameEv
_ZNK9QFileInfo8readLinkEv
_ZNK9QFileInfo9isSymLinkEv

qtnetwork4

_ZN12QLocalServer6listenERK7QString
_ZN12QLocalServerC1EP7QObject

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1cbdba394c99e15c7624b61b0e2ddaf0

Headers

File Characteristics

Imports

kernel32

mingwm10

msvcrt

shell32

libgcc_s_dw2-1

qtcore4

qtnetwork4

Sections

.text Size: 506KB - Virtual size: 505KB

.data Size: 60KB - Virtual size: 59KB

.rdata Size: 59KB - Virtual size: 58KB

.bss Size: - Virtual size: 3KB

.idata Size: 77KB - Virtual size: 80KB

.text
Size: 506KB - Virtual size: 505KB

.data
Size: 60KB - Virtual size: 59KB

.rdata
Size: 59KB - Virtual size: 58KB

.bss
Size: - Virtual size: 3KB

.idata
Size: 77KB - Virtual size: 80KB