Static task
static1
Behavioral task
behavioral1
Sample
7e219f91261f8aac3946ac7a514ddffe2da11f734fc396d201b6281e9e416b3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e219f91261f8aac3946ac7a514ddffe2da11f734fc396d201b6281e9e416b3f.exe
Resource
win10v2004-20221111-en
General
-
Target
7e219f91261f8aac3946ac7a514ddffe2da11f734fc396d201b6281e9e416b3f
-
Size
46KB
-
MD5
3ec30fb2d8d4a525027bb2322d384e20
-
SHA1
6db5a5bd94582b0674b1337ef14dbd7772674e39
-
SHA256
7e219f91261f8aac3946ac7a514ddffe2da11f734fc396d201b6281e9e416b3f
-
SHA512
5ce8038ca130bae545e5f2a1768b0bdd81fa4038c8cba3614fe19c34ea8ce2f83b0dec91a1dc3a2efe2435a2fbd5519e1e7c41d98286b2cda2c472dd979d0746
-
SSDEEP
768:zfzikMRr3JCz9MzjZyAG/st/E2Gm/Jbd25fDN4EkxOliqv2jIzisKl4qphD:zfzi95C+z/0ebd6N4TOliqv2jIzisKl1
Malware Config
Signatures
Files
-
7e219f91261f8aac3946ac7a514ddffe2da11f734fc396d201b6281e9e416b3f.exe windows x86
3432c071825a61243e56535f7c7bc293
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qtcore4
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?trimmed@QString@@QBE?AV1@XZ
?compare@QString@@QBEHABV1@W4CaseSensitivity@Qt@@@Z
?qDebug@@YA?AVQDebug@@XZ
??6QDebug@@QAEAAV0@PBD@Z
??6QDebug@@QAEAAV0@H@Z
??6QDebug@@QAEAAV0@ABVQString@@@Z
??1QDebug@@QAE@XZ
?toWCharArray@QString@@QBEHPAG@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?shared_null@QByteArray@@0UData@1@A
?staticMetaObject@QObject@@2UQMetaObject@@B
??1QString@@QAE@XZ
?fromUtf16@QString@@SA?AV1@PBGH@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
??4QByteArray@@QAEAAV0@ABV0@@Z
?windowsVersion@QSysInfo@@SA?AW4WinVersion@1@XZ
??4QByteArray@@QAEAAV0@PBD@Z
?detach@QByteArray@@QAEXXZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
??0QObject@@QAE@PAV0@@Z
?shared_null@QString@@0UData@1@A
??4QString@@QAEAAV0@ABV0@@Z
?free@QString@@CAXPAUData@1@@Z
??1QObject@@UAE@XZ
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?qWinMain@@YAXPAUHINSTANCE__@@0PADHAAHAAV?$QVector@PAD@@@Z
?malloc@QVectorData@@SAPAU1@HHHPAU1@@Z
?qRealloc@@YAPAXPAXI@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?qt_metacast@QObject@@UAEPAXPBD@Z
?endsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z
??YQString@@QAEAAV0@PBD@Z
?exists@QFile@@SA_NABVQString@@@Z
??0QFile@@QAE@ABVQString@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?qDebug@@YAXPBDZZ
?close@QFile@@UAEXXZ
?qWarning@@YAXPBDZZ
??1QFile@@UAE@XZ
??8QString@@QBE_NPBD@Z
??0QSettings@@QAE@ABVQString@@0PAVQObject@@@Z
??0QVariant@@QAE@XZ
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?toString@QVariant@@QBE?AVQString@@XZ
??1QVariant@@QAE@XZ
??1QSettings@@UAE@XZ
??1QMutex@@QAE@XZ
??0QMutex@@QAE@W4RecursionMode@0@@Z
??0QChar@@QAE@D@Z
?split@QString@@QBE?AVQStringList@@ABVQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?node_delete@QMapData@@QAEXQAPAUNode@1@HPAU21@@Z
?lock@QMutex@@QAEXXZ
?unlock@QMutex@@QAEXXZ
??4QString@@QAEAAV0@PBD@Z
??6QDebug@@QAEAAV0@N@Z
?createData@QMapData@@SAPAU1@XZ
?continueFreeData@QMapData@@QAEXH@Z
?node_create@QMapData@@QAEPAUNode@1@QAPAU21@H@Z
?shared_null@QMapData@@2U1@A
??6QDebug@@QAEAAV0@K@Z
??6QDebug@@QAEAAV0@PBX@Z
?fromWCharArray@QString@@SA?AV1@PBGH@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
?toInt@QString@@QBEHPA_NH@Z
?compare@QString@@QBEHABV1@@Z
?append@QListData@@QAEPAPAXXZ
?detach2@QListData@@QAEPAUData@1@XZ
?qFree@@YAXPAX@Z
??0QString@@QAE@ABV0@@Z
?shared_null@QListData@@2UData@1@A
?WindowsVersion@QSysInfo@@2W4WinVersion@1@B
?utf16@QString@@QBEPBGXZ
?qMalloc@@YAPAXI@Z
?qMemSet@@YAPAXPAXHI@Z
mmcl
IMMCU_Free
??0ParameterElement@@QAE@QAX@Z
??0ParameterElement@@QAE@PBG@Z
??0ParameterElement@@QAE@J@Z
??1ParameterElement@@UAE@XZ
IMMCU_Create
qtxml4
?elementsByTagName@QDomElement@@QBE?AVQDomNodeList@@ABVQString@@@Z
??1QDomDocument@@QAE@XZ
??1QDomElement@@QAE@XZ
??1QDomNode@@QAE@XZ
??0QDomDocument@@QAE@XZ
?setContent@QDomDocument@@QAE_NPAVQIODevice@@_NPAVQString@@PAH3@Z
?documentElement@QDomDocument@@QBE?AVQDomElement@@XZ
?isElement@QDomNode@@QBE_NXZ
??4QDomElement@@QAEAAV0@ABV0@@Z
?text@QDomElement@@QBE?AVQString@@XZ
?isNull@QDomNode@@QBE_NXZ
?firstChildElement@QDomNode@@QBE?AVQDomElement@@ABVQString@@@Z
?length@QDomNodeList@@QBEIXZ
?namedItem@QDomNamedNodeMap@@QBE?AVQDomNode@@ABVQString@@@Z
?at@QDomNodeList@@QBE?AVQDomNode@@H@Z
?attributes@QDomNode@@QBE?AVQDomNamedNodeMap@@XZ
?nodeValue@QDomNode@@QBE?AVQString@@XZ
??4QDomNode@@QAEAAV0@ABV0@@Z
??1QDomNamedNodeMap@@QAE@XZ
??1QDomNodeList@@QAE@XZ
kernel32
GetCommandLineA
Sleep
GetCurrentThreadId
GetCommandLineW
CreateFileW
GetLastError
WaitNamedPipeW
SetNamedPipeHandleState
WriteFile
ReadFile
CloseHandle
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
msvcp80
?_Lock@_Mutex@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Unlock@_Mutex@std@@QAEXXZ
msvcr80
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_XcptFilter
__set_app_type
_unlock
??2@YAPAXI@Z
fclose
??3@YAXPAX@Z
__CxxFrameHandler3
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
_encode_pointer
__p__fmode
_invoke_watson
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__dllonexit
_controlfp_s
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE