8e72293532e530164d160b8c06475bbdddd18049c0552c673f3af8b173a5e017

Sharing

Copy URL Twitter E-mail

General

Target

8e72293532e530164d160b8c06475bbdddd18049c0552c673f3af8b173a5e017
Size

11KB
MD5

d86e33894c37121213786be8b26311a0
SHA1

da46b5013ee127355698ae8fdfeb82e802d3161a
SHA256

8e72293532e530164d160b8c06475bbdddd18049c0552c673f3af8b173a5e017
SHA512

28bfad1f124dcf1bf21fe1c2f25a0bf52e957ea6d2dc02c4fefa3de445a6e4f6d6967a455f08c66eac576b9f35b61ea0438a2a176473411948f22c2ed913549e
SSDEEP

192:bUyCGnBocpCt1SScsu0LHGTIXTLVqCd7oVkASzruVQG60qUn6:bUtqB2s0LHG0XTLh7krSHuVTn6

Score

N/A

Malware Config

Signatures

Files

8e72293532e530164d160b8c06475bbdddd18049c0552c673f3af8b173a5e017
.exe windows x86

b89855581ba5d3a7428d30ccb1032cd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qtxmlpatterns4

??0QXmlSchema@@QAE@XZ
?load@QXmlSchema@@QAE_NABVQUrl@@@Z
?isValid@QXmlSchema@@QBE_NXZ
??1QXmlSchema@@QAE@XZ
??0QXmlSchemaValidator@@QAE@ABVQXmlSchema@@@Z
?validate@QXmlSchemaValidator@@QBE_NABVQUrl@@@Z
??1QXmlSchemaValidator@@QAE@XZ

qtcore4

??0QCoreApplication@@QAE@AAHPAPAD@Z
?fromLatin1_helper@QString@@CAPAUData@1@PBDH@Z
?setApplicationName@QCoreApplication@@SAXABVQString@@@Z
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
?qDebug@@YA?AVQDebug@@XZ
??6QDebug@@QAEAAV0@ABVQString@@@Z
??1QDebug@@QAE@XZ
??1QCoreApplication@@UAE@XZ
??0QUrl@@QAE@XZ
??0QUrl@@QAE@ABVQString@@@Z
?isRelative@QUrl@@QBE_NXZ
??1QUrl@@QAE@XZ
??4QUrl@@QAEAAV0@ABV0@@Z
?fromLocalFile@QUrl@@SA?AV1@ABVQString@@@Z
?toLower@QString@@QBE?AV1@XZ
?endsWith@QString@@QBE_NABVQLatin1String@@W4CaseSensitivity@Qt@@@Z
??4QUrl@@QAEAAV0@ABVQString@@@Z
?toString@QUrl@@QBE?AVQString@@V?$QFlags@W4FormattingOption@QUrl@@@@@Z
??1QString@@QAE@XZ
?detach@QListData@@QAEPAUData@1@H@Z
??0QString@@QAE@ABV0@@Z
?qFree@@YAXPAX@Z
?free@QString@@CAXPAUData@1@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00W4Encoding@1@@Z

msvcr100

_controlfp_s
_invoke_watson
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
__CxxFrameHandler3
_CxxThrowException
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
_initterm

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b89855581ba5d3a7428d30ccb1032cd2

Headers

DLL Characteristics

File Characteristics

Imports

qtxmlpatterns4

qtcore4

msvcr100

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 664B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 664B