QTGrid[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QTGrid.dll
Size

180KB
MD5

656c1a6bef139c8cb4aed5797b420f7d
SHA1

8845e903d1ef7532d506e387672163c3d51efab8
SHA256

48237cb91209879193356c789653b61999dfc8884ea724d842e3de987b93827c
SHA512

66d5a96e6465efe6a565e2afc03984032410feb93dc39266db7dddc50d3aac122d51c9f2345c5f126f21d14eab9d83485d1dc12f79b001d29395410af6238985
SSDEEP

3072:o6vE5dHwxqYmMEs7uzhFS/PBKSOCtKcKEgkzvFkBipg30:o6kwxbiWnuErRkBipD

Score

N/A

Malware Config

Signatures

Files

QTGrid.dll
.dll regsvr32 windows x86

16e0906489d96bc2e9697578aa82aeed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
GetStockObject
SelectObject
Rectangle
SetBkMode
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
GetDeviceCaps
GetObjectW
GetTextExtentPoint32W
CreateFontIndirectW
SetBkColor
SetTextColor
CreateSolidBrush

mfc71u

ord1155
ord557
ord709
ord5638
ord326
ord5727
ord501
ord4119
ord1182
ord1178
ord762
ord314
ord5609
ord265
ord4032
ord4008
ord6272
ord3795
ord6274
ord2054
ord5579
ord3800
ord6215
ord5378
ord3826
ord1911
ord2925
ord5220
ord5222
ord3942
ord4562
ord5226
ord5209
ord5562
ord2832
ord2984
ord4475
ord3327
ord757
ord3824
ord2239
ord1908
ord5231
ord5229
ord2384
ord2394
ord2392
ord2390
ord2386
ord2409
ord2397
ord1647
ord1646
ord1590
ord577
ord280
ord6063
ord870
ord293
ord1183
ord5711
ord2895
ord774
ord283
ord899
ord896
ord2311
ord2310
ord3927
ord4320
ord2009
ord1007
ord5096
ord566
ord3678
ord3204
ord1925
ord3157
ord1271
ord2362
ord2366
ord1894
ord3756
ord1545
ord5911
ord1611
ord1608
ord3940
ord1393
ord4238
ord5148
ord1899
ord5067
ord6271
ord4179
ord5210
ord3397
ord4716
ord4276
ord1591
ord5956
ord920
ord925
ord929
ord927
ord931
ord2404
ord2388
ord2407
ord581
ord1162
ord1087
ord1200
ord1170
ord1168
ord1192
ord760
ord745
ord3331
ord2361
ord3198
ord1079
ord1176
ord6002
ord6086
ord2648
ord266
ord4686
ord5829
ord620
ord764
ord572
ord3189
ord4255
ord4480
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2856
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2402
ord2379
ord765
ord315
ord1033
ord1197
ord1199
ord1093
ord371
ord1115

msvcr71

malloc
_onexit
_adjust_fdiv
__CppXcptFilter
??1type_info@@UAE@XZ
_initterm
__dllonexit
?terminate@@YAXXZ
__security_error_handler
memset
wcstol
_wtoi
wcschr
wcscat
_except_handler3
wcscpy
swprintf
_time64
wcsrchr
iswdigit
memmove
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_purecall
realloc
wcspbrk
_localtime64
wcslen
vswprintf
wcsstr
_wcsicmp
wcscmp
??0exception@@QAE@XZ
??1exception@@UAE@XZ
__CxxFrameHandler
free
_vscwprintf

kernel32

GetVersionExA
HeapReAlloc
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LocalAlloc
LocalFree
RaiseException
InterlockedDecrement
InterlockedIncrement
Sleep
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LoadLibraryW
FreeLibrary
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
MultiByteToWideChar
SetLastError
GetLocalTime
GetProcessHeap
HeapFree
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapDestroy

user32

DispatchMessageW
EnableWindow
GetParent
RedrawWindow
PostMessageW
SendMessageW
TranslateMessage
EnumChildWindows
ShowWindow
SetPropW
RemovePropW
LoadIconW
DestroyIcon
CreateWindowExW
MapDialogRect
SetWindowContextHelpId
SetWindowPos
GetKeyState
GetWindow
GetFocus
IsChild
SystemParametersInfoW
SendDlgItemMessageW
SetWindowLongW
DrawTextW
SetTimer
ReleaseDC
GetScrollPos
DestroyWindow
SetFocus
GetDlgItem
GetPropW
CallWindowProcW
KillTimer
LoadStringW
IsWindowVisible
GetWindowRect
OffsetRect
CopyRect
IsWindow
GetClassInfoW
DefWindowProcW
LoadCursorW
InvalidateRect
GetDC
ClientToScreen
GetClientRect
FrameRect
FillRect
InflateRect
GetSysColor

advapi32

RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ole32

CoRevokeClassObject
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CoCreateInstance

oleaut32

SysFreeString
SysStringLen
SysAllocString
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VarBstrCmp
VariantInit
VarCmp
VariantCopy
VariantChangeType
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayLock
SafeArrayUnlock
SafeArrayGetElement
SafeArrayDestroyDescriptor
SafeArrayDestroyData
VarDecCmp
OleCreateFontIndirect
OleTranslateColor
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
DispCallFunc
SysReAllocStringLen
SafeArrayRedim
SafeArrayPutElement
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy

atl71

ord56
ord49
ord55
ord20
ord64
ord22
ord23
ord54
ord44
ord43
ord37
ord48
ord60
ord42
ord61
ord15
ord32
ord58
ord18
ord66
ord65
ord10
ord11
ord30
ord31
ord26
ord27
ord47

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e0906489d96bc2e9697578aa82aeed

Headers

File Characteristics

Imports

gdi32

mfc71u

msvcr71

kernel32

user32

advapi32

ole32

oleaut32

atl71

msvcp71

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 113KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 116KB - Virtual size: 113KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 16KB - Virtual size: 12KB