Static task
static1
Behavioral task
behavioral1
Sample
fe5fec6db19bbf8e6e209f0c9afdd8c52b68190ecd1ebe3b40ffbcc860f4ebbd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe5fec6db19bbf8e6e209f0c9afdd8c52b68190ecd1ebe3b40ffbcc860f4ebbd.exe
Resource
win10v2004-20220812-en
General
-
Target
fe5fec6db19bbf8e6e209f0c9afdd8c52b68190ecd1ebe3b40ffbcc860f4ebbd
-
Size
351KB
-
MD5
9c26c7842858a3fdcd0d655ae860ebb0
-
SHA1
e73ad29c7f0210d058200228b412e4c62a853630
-
SHA256
fe5fec6db19bbf8e6e209f0c9afdd8c52b68190ecd1ebe3b40ffbcc860f4ebbd
-
SHA512
164717444101d64f05150cf18eb622d88b918eb0ea3a5ebd0e847391a58d923b5f52652dbb9384482a2f9de8dc79670426b7283ac0f583bb7f63833514aa3cc1
-
SSDEEP
6144:RIVMvACOp41G3/Cd88UPIWEr09CGEdz54JrYA7iXkzkk3Z/+QOnH4s7o8n6SW+4f:U3t8UPgr09a0J0pXkzkk3Zm9Ys7o86zJ
Malware Config
Signatures
Files
-
fe5fec6db19bbf8e6e209f0c9afdd8c52b68190ecd1ebe3b40ffbcc860f4ebbd.exe windows x86
32a0acc7fc82eda1b4c448d8b407b25f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qtxml4
?setContent@QDomDocument@@QAE_NABVQString@@PAV2@PAH2@Z
?isNull@QDomNode@@QBE_NXZ
?text@QDomElement@@QBE?AVQString@@XZ
?nextSiblingElement@QDomNode@@QBE?AVQDomElement@@ABVQString@@@Z
??4QDomElement@@QAEAAV0@ABV0@@Z
??0QDomDocument@@QAE@XZ
??1QDomDocument@@QAE@XZ
?setContent@QDomDocument@@QAE_NPAVQIODevice@@_NPAVQString@@PAH3@Z
?firstChildElement@QDomNode@@QBE?AVQDomElement@@ABVQString@@@Z
?attribute@QDomElement@@QBE?AVQString@@ABV2@0@Z
??1QDomNode@@QAE@XZ
??1QDomElement@@QAE@XZ
qtgui4
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?setLabelText@QProgressDialog@@QAEXABVQString@@@Z
?setValue@QProgressDialog@@QAEXH@Z
?value@QProgressDialog@@QBEHXZ
?setMaximum@QProgressDialog@@QAEXH@Z
?maximum@QProgressDialog@@QBEHXZ
?setWindowModality@QWidget@@QAEXW4WindowModality@Qt@@@Z
??0QProgressDialog@@QAE@ABVQString@@0HHPAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?metaObject@QProgressDialog@@UBEPBUQMetaObject@@XZ
?qt_metacast@QProgressDialog@@UAEPAXPBD@Z
?qt_metacall@QProgressDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
?eventFilter@QDialog@@MAE_NPAVQObject@@PAVQEvent@@@Z
??1QWidget@@UAE@XZ
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?setVisible@QWidget@@UAEX_N@Z
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?metaObject@QWidget@@UBEPBUQMetaObject@@XZ
??0QApplication@@QAE@AAHPAPADH@Z
??1QApplication@@UAE@XZ
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
?show@QWidget@@QAEXXZ
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?exec@QApplication@@SAHXZ
??1QProgressDialog@@UAE@XZ
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?releaseDC@QWidget@@UBEXPAUHDC__@@@Z
?getDC@QWidget@@UBEPAUHDC__@@XZ
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?devType@QWidget@@UBEHXZ
?reject@QDialog@@UAEXXZ
?accept@QDialog@@UAEXXZ
?done@QDialog@@UAEXH@Z
?languageChange@QWidget@@MAEXXZ
?windowActivationChange@QWidget@@MAEX_N@Z
?fontChange@QWidget@@MAEXABVQFont@@@Z
?paletteChange@QWidget@@MAEXABVQPalette@@@Z
?enabledChange@QWidget@@MAEX_N@Z
?styleChange@QWidget@@MAEXAAVQStyle@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?changeEvent@QProgressDialog@@MAEXPAVQEvent@@@Z
?winEvent@QWidget@@MAE_NPAUtagMSG@@PAJ@Z
?setVisible@QDialog@@UAEX_N@Z
?showEvent@QProgressDialog@@MAEXPAVQShowEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QProgressDialog@@MAEXPAVQCloseEvent@@@Z
?resizeEvent@QProgressDialog@@MAEXPAVQResizeEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?heightForWidth@QWidget@@UBEHH@Z
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?sizeHint@QProgressDialog@@UBE?AVQSize@@XZ
?wasCanceled@QProgressDialog@@QBE_NXZ
qtnetwork4
??1QNetworkRequest@@QAE@XZ
?isRunning@QNetworkReply@@QBE_NXZ
?get@QNetworkAccessManager@@QAEPAVQNetworkReply@@ABVQNetworkRequest@@@Z
?setRawHeader@QNetworkRequest@@QAEXABVQByteArray@@0@Z
?setUrl@QNetworkRequest@@QAEXABVQUrl@@@Z
??0QNetworkRequest@@QAE@ABVQUrl@@@Z
??0QNetworkAccessManager@@QAE@PAVQObject@@@Z
?metaObject@QNetworkAccessManager@@UBEPBUQMetaObject@@XZ
?qt_metacast@QNetworkAccessManager@@UAEPAXPBD@Z
?qt_metacall@QNetworkAccessManager@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?createRequest@QNetworkAccessManager@@MAEPAVQNetworkReply@@W4Operation@1@ABVQNetworkRequest@@PAVQIODevice@@@Z
??1QNetworkAccessManager@@UAE@XZ
qtcore4
?qBadAlloc@@YAXXZ
?allocate@QVectorData@@SAPAU1@HH@Z
?qMemSet@@YAPAXPAXHI@Z
?reallocate@QVectorData@@SAPAU1@PAU1@HHH@Z
?qWinMain@@YAXPAUHINSTANCE__@@0PADHAAHAAV?$QVector@PAD@@@Z
?detach@QByteArray@@QAEXXZ
?free@QString@@CAXPAUData@1@@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?fromWCharArray@QString@@SA?AV1@PBGH@Z
?free@QVectorData@@SAXPAU1@H@Z
??0QSystemSemaphore@@QAE@ABVQString@@HW4AccessMode@0@@Z
?acquire@QSystemSemaphore@@QAE_NXZ
??0QSharedMemory@@QAE@ABVQString@@PAVQObject@@@Z
?create@QSharedMemory@@QAE_NHW4AccessMode@1@@Z
?release@QSystemSemaphore@@QAE_NH@Z
??1QSharedMemory@@UAE@XZ
??1QSystemSemaphore@@QAE@XZ
?entryInfoList@QDir@@QBE?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?filePath@QFileInfo@@QBE?AVQString@@XZ
?isDir@QFileInfo@@QBE_NXZ
?isFile@QFileInfo@@QBE_NXZ
?rmpath@QDir@@QBE_NABVQString@@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?toString@QDateTime@@QBE?AVQString@@ABV2@@Z
??1QDateTime@@QAE@XZ
?toAscii@QString@@QBE?AVQByteArray@@XZ
?detach@QListData@@QAEPAUData@1@H@Z
??0QFileInfo@@QAE@ABV0@@Z
?end@QListData@@QBEPAPAXXZ
?begin@QListData@@QBEPAPAXXZ
?replace@QString@@QAEAAV1@ABV1@0W4CaseSensitivity@Qt@@@Z
??1QString@@QAE@XZ
??YQString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@ABV0@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
?ref@QBasicAtomicInt@@QAE_NXZ
?shared_null@QListData@@2UData@1@A
?write@QIODevice@@QAE_JABVQByteArray@@@Z
?instance@QCoreApplication@@SAPAV1@XZ
?processEvents@QCoreApplication@@SAXV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
??1QFile@@UAE@XZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QFile@@QAE@ABVQString@@@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
??1QEventLoop@@UAE@XZ
?exec@QEventLoop@@QAEHV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
??0QEventLoop@@QAE@PAVQObject@@@Z
??1QByteArray@@QAE@XZ
??0QByteArray@@QAE@PBD@Z
??0QUrl@@QAE@ABVQString@@@Z
??1QUrl@@QAE@XZ
??0QUrl@@QAE@XZ
??0QString@@QAE@XZ
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?toInt@QString@@QBEHPA_NH@Z
?trimmed@QString@@QBE?AV1@XZ
??0QString@@QAE@PBD@Z
??0QFile@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@ABVQByteArray@@@Z
?qFree@@YAXPAX@Z
??8QBasicAtomicInt@@QBE_NH@Z
?deref@QBasicAtomicInt@@QAE_NXZ
?copy@QFile@@SA_NABVQString@@0@Z
?remove@QFile@@SA_NABVQString@@@Z
??1QFileInfo@@QAE@XZ
??8QString@@QBE_NABV0@@Z
?toHex@QByteArray@@QBE?AV1@XZ
?hash@QCryptographicHash@@SA?AVQByteArray@@ABV2@W4Algorithm@1@@Z
?exists@QFileInfo@@QBE_NXZ
??0QFileInfo@@QAE@ABVQString@@@Z
??1QDir@@QAE@XZ
?mkpath@QDir@@QBE_NABVQString@@@Z
??0QDir@@QAE@ABVQString@@@Z
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?left@QString@@QBE?AV1@H@Z
?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
??0QChar@@QAE@D@Z
kernel32
Sleep
GetCommandLineW
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetTickCount
MultiByteToWideChar
LoadLibraryW
GetTempPathW
FreeLibrary
GetProcAddress
ExitProcess
msvcr90
__CxxFrameHandler3
??3@YAXPAX@Z
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
atoi
_vswprintf
memset
_CxxThrowException
??2@YAPAXI@Z
memcpy
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ