wkhtmltopdf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

wkhtmltopdf.exe
Size

42.7MB
MD5

0dba4153461d11ede81aed14ba00089b
SHA1

1ef0073887154bf2b69667a8162656bad5ff3a6b
SHA256

3b1ca2012316aa3848a5fae9d6b675acc269503b45b0945e767b72cfb2769b8e
SHA512

e07af46ad5e91b20b14fe0bca1d1f105654164513646befb8467363ef5d43ec808e5ad5d89d89b001a6a933da895b0a12016b1af0954e716426771565587ef70
SSDEEP

786432:VWDHts8rzq9hcaddUJdYiMPJZYyB2dt8vDiTiyPE7uGzRXvcwgyvCAJKz:UHaWt+4pMP8e2dt8LieyPE7uGzRvcwfa

Score

1^/10

Malware Config

Signatures

Files

wkhtmltopdf.exe
.exe windows x86

305836e6ebe70dc5b1eb2718225f2ed8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1d:3a:ee:35:0b:e1:ff:cc:0f:ff:bf:65:dc:ab:ac:f1
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18/07/2019, 00:00

Not After

17/07/2020, 23:59

Subject

CN=INFOTEKH & SERVIS\, TOO,O=INFOTEKH & SERVIS\, TOO,POSTALCODE=050000,STREET=43 V prospekt Ryskulova,L=Almaty,ST=Kazakhstan,C=KZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:27:dd:8a:d5:a3:b1:66:7e:32:fe:41:47:61:42:b7:88:9c:97:b2:72:b3:2c:f9:2f:61:7f:96:e4:a9:f8:9c
Signer

Actual PE Digest

d6:27:dd:8a:d5:a3:b1:66:7e:32:fe:41:47:61:42:b7:88:9c:97:b2:72:b3:2c:f9:2f:61:7f:96:e4:a9:f8:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CopySid
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
FreeSid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

gdi32

AbortDoc
BeginPath
BitBlt
CloseFigure
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateEllipticRgn
CreateFontIndirectW
CreatePalette
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
EndPath
EnumFontFamiliesExW
ExtCreatePen
ExtTextOutW
FillPath
GdiFlush
GetBkMode
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCurrentObject
GetDIBits
GetDeviceCaps
GetFontData
GetGlyphOutlineW
GetNearestPaletteIndex
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetRegionData
GetRgnBox
GetStockObject
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
GetWorldTransform
LineTo
MoveToEx
OffsetRgn
PolyBezierTo
PtInRegion
RealizePalette
ResetDCW
RestoreDC
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetGraphicsMode
SetPolyFillMode
SetTextAlign
SetTextColor
SetWorldTransform
StartDocW
StartPage
StretchBlt
StrokePath

imm32

ImmAssociateContext
ImmGetCompositionStringW
ImmGetContext
ImmGetDefaultIMEWnd
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionFontW
ImmSetCompositionWindow

kernel32

AreFileApisANSI
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiber
CopyFileW
CreateDirectoryW
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingW
CreateFileW
CreateProcessW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDrives
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetProfileStringW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalSize
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLanguageGroup
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleA
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetConsoleMode
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
lstrcmpW

msvcrt

__dllonexit
__doserrno
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_clearfp
_close
_control87
_endthreadex
_errno
_exit
_filelengthi64
_fileno
_flushall
_fmode
_fstat64
_ftime
_get_osfhandle
_getdrive
_initterm
_iob
_lock
_lseek
_lseeki64
_msize
_onexit
_open_osfhandle
_read
_setjmp3
_setmode
_snwprintf
_stat
time
mktime
localtime
gmtime
_stricmp
_strnicmp
_tzset
_unlock
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getenv
getwc
isalnum
isalpha
islower
isspace
isupper
iswctype
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
puts
putwc
qsort
raise
rand
realloc
remove
setlocale
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
_vsnprintf
_vsnwprintf
_waccess
_wchmod
_wfopen
_wgetdcwd
_wgetenv
_write
abort
acos
asin
atan
atof
tan
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcscpy
wcsftime
wcslen
wcsrchr
wcsstr
wcsxfrm
atoi
_tzname
longjmp
_nextafter
_write
_strdup
_read
_putenv
_fileno
_fdopen
_close

ole32

CoCreateGuid
CoCreateInstance
CoGetMalloc
CoInitialize
CoLockObjectExternal
CoTaskMemFree
CoUninitialize
DoDragDrop
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleSetClipboard
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2

shell32

SHGetFileInfoW
ShellExecuteW
Shell_NotifyIconW

shlwapi

PathCombineW
PathRemoveFileSpecW
SHGetValueW

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
CharNextExA
ClientToScreen
ClipCursor
CreateCaret
CreateCursor
CreateIconIndirect
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCaret
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
DrawIconEx
EnableMenuItem
EndPaint
FindWindowExW
FindWindowW
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoW
GetClientRect
GetClipboardFormatNameW
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetLastInputInfo
GetMenu
GetMessageW
GetParent
GetProcessWindowStation
GetPropW
GetQueueStatus
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowThreadProcessId
HideCaret
InvalidateRect
InvalidateRgn
IsChild
IsIconic
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindowEx
SendMessageW
SetCapture
SetCaretBlinkTime
SetCaretPos
SetClipboardViewer
SetCursor
SetCursorPos
SetDoubleClickTime
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetParent
SetPropW
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
ToAscii
ToUnicode
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRgn
WindowFromPoint

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeBeginPeriod
timeEndPeriod

winspool.drv

ClosePrinter
DeviceCapabilitiesW
EnumFormsW
EnumPrintersW
GetPrinterW
OpenPrinterW

ws2_32

WSAAccept
WSAAsyncSelect
WSACleanup
WSAConnect
WSAGetLastError
WSAHtonl
WSAHtons
WSAIoctl
WSANtohl
WSANtohs
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketW
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
inet_addr
ioctlsocket
listen
ntohl
ntohs
recv
select
send
setsockopt
socket

Exports

Exports

_Z11handleErrorbi
_ZN11wkhtmltopdf12PdfConverter11addResourceERKNS_8settings9PdfObjectEPK7QString
_ZN11wkhtmltopdf12PdfConverter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf12PdfConverter11qt_metacastEPKc
_ZN11wkhtmltopdf12PdfConverter14producingFormsEb
_ZN11wkhtmltopdf12PdfConverter16staticMetaObjectE
_ZN11wkhtmltopdf12PdfConverter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf12PdfConverter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf12PdfConverter27millimeterToPointMultiplierE
_ZN11wkhtmltopdf12PdfConverter4privEv
_ZN11wkhtmltopdf12PdfConverter6outputEv
_ZN11wkhtmltopdf12PdfConverterC1ERNS_8settings9PdfGlobalE
_ZN11wkhtmltopdf12PdfConverterC2ERNS_8settings9PdfGlobalE
_ZN11wkhtmltopdf12PdfConverterD0Ev
_ZN11wkhtmltopdf12PdfConverterD1Ev
_ZN11wkhtmltopdf12PdfConverterD2Ev
_ZN11wkhtmltopdf14ImageConverter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf14ImageConverter11qt_metacastEPKc
_ZN11wkhtmltopdf14ImageConverter16staticMetaObjectE
_ZN11wkhtmltopdf14ImageConverter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf14ImageConverter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf14ImageConverter4privEv
_ZN11wkhtmltopdf14ImageConverter6outputEv
_ZN11wkhtmltopdf14ImageConverterC1ERNS_8settings11ImageGlobalEPK7QString
_ZN11wkhtmltopdf14ImageConverterC2ERNS_8settings11ImageGlobalEPK7QString
_ZN11wkhtmltopdf14ImageConverterD0Ev
_ZN11wkhtmltopdf14ImageConverterD1Ev
_ZN11wkhtmltopdf14ImageConverterD2Ev
_ZN11wkhtmltopdf24dumpDefaultTOCStyleSheetER11QTextStreamRNS_8settings14TableOfContentE
_ZN11wkhtmltopdf8settings10LoadGlobalC1Ev
_ZN11wkhtmltopdf8settings10LoadGlobalC2Ev
_ZN11wkhtmltopdf8settings10proxyToStrERKNS0_5ProxyE
_ZN11wkhtmltopdf8settings10strToProxyEPKcPb
_ZN11wkhtmltopdf8settings11ImageGlobal3getEPKc
_ZN11wkhtmltopdf8settings11ImageGlobal3setEPKcRK7QString
_ZN11wkhtmltopdf8settings11ImageGlobalC1Ev
_ZN11wkhtmltopdf8settings11ImageGlobalC2Ev
_ZN11wkhtmltopdf8settings12CropSettingsC1Ev
_ZN11wkhtmltopdf8settings12CropSettingsC2Ev
_ZN11wkhtmltopdf8settings12HeaderFooterC1Ev
_ZN11wkhtmltopdf8settings12HeaderFooterC2Ev
_ZN11wkhtmltopdf8settings13logLevelToStrERKNS0_8LogLevelEPb
_ZN11wkhtmltopdf8settings13pageSizeToStrEN8QPrinter8PageSizeE
_ZN11wkhtmltopdf8settings13strToLogLevelEPKcPb
_ZN11wkhtmltopdf8settings13strToPageSizeEPKcPb
_ZN11wkhtmltopdf8settings13strToUnitRealEPKcPb
_ZN11wkhtmltopdf8settings13unitRealToStrERK5QPairIdN8QPrinter4UnitEEPb
_ZN11wkhtmltopdf8settings14TableOfContentC1Ev
_ZN11wkhtmltopdf8settings14TableOfContentC2Ev
_ZN11wkhtmltopdf8settings14colorModeToStrEN8QPrinter9ColorModeE
_ZN11wkhtmltopdf8settings14strToColorModeEPKcPb
_ZN11wkhtmltopdf8settings16orientationToStrEN8QPrinter11OrientationE
_ZN11wkhtmltopdf8settings16printerModeToStrEN8QPrinter11PrinterModeE
_ZN11wkhtmltopdf8settings16strToOrientationEPKcPb
_ZN11wkhtmltopdf8settings16strToPrinterModeEPKcPb
_ZN11wkhtmltopdf8settings22loadErrorHandlingToStrENS0_8LoadPage17LoadErrorHandlingE
_ZN11wkhtmltopdf8settings22strToLoadErrorHandlingEPKcPb
_ZN11wkhtmltopdf8settings3WebC1Ev
_ZN11wkhtmltopdf8settings3WebC2Ev
_ZN11wkhtmltopdf8settings4SizeC1Ev
_ZN11wkhtmltopdf8settings4SizeC2Ev
_ZN11wkhtmltopdf8settings5ProxyC1Ev
_ZN11wkhtmltopdf8settings5ProxyC2Ev
_ZN11wkhtmltopdf8settings6MarginC1Ev
_ZN11wkhtmltopdf8settings6MarginC2Ev
_ZN11wkhtmltopdf8settings8LoadPage20mediaFilesExtensionsE
_ZN11wkhtmltopdf8settings8LoadPageC1Ev
_ZN11wkhtmltopdf8settings8LoadPageC2Ev
_ZN11wkhtmltopdf8settings9PdfGlobal3getEPKc
_ZN11wkhtmltopdf8settings9PdfGlobal3setEPKcRK7QString
_ZN11wkhtmltopdf8settings9PdfGlobalC1Ev
_ZN11wkhtmltopdf8settings9PdfGlobalC2Ev
_ZN11wkhtmltopdf8settings9PdfObject3getEPKc
_ZN11wkhtmltopdf8settings9PdfObject3setEPKcRK7QString
_ZN11wkhtmltopdf8settings9PdfObjectC1Ev
_ZN11wkhtmltopdf8settings9PdfObjectC2Ev
_ZN11wkhtmltopdf9Converter10phaseCountEv
_ZN11wkhtmltopdf9Converter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf9Converter11qt_metacastEPKc
_ZN11wkhtmltopdf9Converter12currentPhaseEv
_ZN11wkhtmltopdf9Converter12phaseChangedEv
_ZN11wkhtmltopdf9Converter13httpErrorCodeEv
_ZN11wkhtmltopdf9Converter14progressStringEv
_ZN11wkhtmltopdf9Converter15beginConversionEv
_ZN11wkhtmltopdf9Converter15progressChangedEi
_ZN11wkhtmltopdf9Converter16emitCheckboxSvgsERKNS_8settings8LoadPageE
_ZN11wkhtmltopdf9Converter16phaseDescriptionEi
_ZN11wkhtmltopdf9Converter16staticMetaObjectE
_ZN11wkhtmltopdf9Converter18checkboxSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf9Converter21radiobuttonSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter25checkboxCheckedSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf9Converter28radiobuttonCheckedSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter5errorERK7QString
_ZN11wkhtmltopdf9Converter6cancelEv
_ZN11wkhtmltopdf9Converter7convertEv
_ZN11wkhtmltopdf9Converter7warningERK7QString
_ZN11wkhtmltopdf9Converter8finishedEb
_ZN12MyLooksStyle11qt_metacallEN11QMetaObject4CallEiPPv
_ZN12MyLooksStyle11qt_metacastEPKc
_ZN12MyLooksStyle11radiobuttonE
_ZN12MyLooksStyle14producingFormsEb
_ZN12MyLooksStyle14setCheckboxSvgERK7QString
_ZN12MyLooksStyle16checkbox_checkedE
_ZN12MyLooksStyle16staticMetaObjectE
_ZN12MyLooksStyle17setRadioButtonSvgERK7QString
_ZN12MyLooksStyle18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN12MyLooksStyle19radiobutton_checkedE
_ZN12MyLooksStyle21setCheckboxCheckedSvgERK7QString
_ZN12MyLooksStyle24setRadioButtonCheckedSvgERK7QString
_ZN12MyLooksStyle25staticMetaObjectExtraDataE
_ZN12MyLooksStyle8checkboxE
_ZN12MyLooksStyleC1Ev
_ZN12MyLooksStyleC2Ev
_ZNK11wkhtmltopdf12PdfConverter10metaObjectEv
_ZNK11wkhtmltopdf12PdfConverter14globalSettingsEv
_ZNK11wkhtmltopdf14ImageConverter10metaObjectEv
_ZNK11wkhtmltopdf9Converter10metaObjectEv
_ZNK12MyLooksStyle10metaObjectEv
_ZNK12MyLooksStyle13drawPrimitiveEN6QStyle16PrimitiveElementEPK12QStyleOptionP8QPainterPK7QWidget
_ZTI12MyLooksStyle
_ZTIN11wkhtmltopdf12PdfConverterE
_ZTIN11wkhtmltopdf14ImageConverterE
_ZTIN11wkhtmltopdf9ConverterE
_ZTV12MyLooksStyle
_ZTVN11wkhtmltopdf12PdfConverterE
_ZTVN11wkhtmltopdf14ImageConverterE
_ZTVN11wkhtmltopdf9ConverterE
wkhtmltoimage_convert@4
wkhtmltoimage_create_converter@8
wkhtmltoimage_create_global_settings@0
wkhtmltoimage_current_phase@4
wkhtmltoimage_deinit@0
wkhtmltoimage_destroy_converter@4
wkhtmltoimage_destroy_global_settings@4
wkhtmltoimage_extended_qt@0
wkhtmltoimage_get_global_setting@16
wkhtmltoimage_get_output@8
wkhtmltoimage_http_error_code@4
wkhtmltoimage_init@4
wkhtmltoimage_phase_count@4
wkhtmltoimage_phase_description@8
wkhtmltoimage_progress_string@4
wkhtmltoimage_set_error_callback@8
wkhtmltoimage_set_finished_callback@8
wkhtmltoimage_set_global_setting@12
wkhtmltoimage_set_phase_changed_callback@8
wkhtmltoimage_set_progress_changed_callback@8
wkhtmltoimage_set_warning_callback@8
wkhtmltoimage_version@0
wkhtmltopdf_add_object@12
wkhtmltopdf_convert@4
wkhtmltopdf_create_converter@4
wkhtmltopdf_create_global_settings@0
wkhtmltopdf_create_object_settings@0
wkhtmltopdf_current_phase@4
wkhtmltopdf_deinit@0
wkhtmltopdf_destroy_converter@4
wkhtmltopdf_destroy_global_settings@4
wkhtmltopdf_destroy_object_settings@4
wkhtmltopdf_extended_qt@0
wkhtmltopdf_get_global_setting@16
wkhtmltopdf_get_object_setting@16
wkhtmltopdf_get_output@8
wkhtmltopdf_http_error_code@4
wkhtmltopdf_init@4
wkhtmltopdf_phase_count@4
wkhtmltopdf_phase_description@8
wkhtmltopdf_progress_string@4
wkhtmltopdf_set_error_callback@8
wkhtmltopdf_set_finished_callback@8
wkhtmltopdf_set_global_setting@12
wkhtmltopdf_set_object_setting@12
wkhtmltopdf_set_phase_changed_callback@8
wkhtmltopdf_set_progress_changed_callback@8
wkhtmltopdf_set_warning_callback@8
wkhtmltopdf_version@0

Sections

.text
Size: 37.1MB - Virtual size: 37.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

305836e6ebe70dc5b1eb2718225f2ed8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

1d:3a:ee:35:0b:e1:ff:cc:0f:ff:bf:65:dc:ab:ac:f1Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

d6:27:dd:8a:d5:a3:b1:66:7e:32:fe:41:47:61:42:b7:88:9c:97:b2:72:b3:2c:f9:2f:61:7f:96:e4:a9:f8:9cSigner

Headers

File Characteristics

Imports

advapi32

comdlg32

gdi32

imm32

kernel32

msvcrt

ole32

shell32

shlwapi

user32

version

winmm

winspool.drv

ws2_32

Exports

Exports

Sections

.text Size: 37.1MB - Virtual size: 37.1MB

.data Size: 97KB - Virtual size: 97KB

.rdata Size: 4.3MB - Virtual size: 4.3MB

.bss Size: - Virtual size: 58KB

.edata Size: 9KB - Virtual size: 9KB

.idata Size: 17KB - Virtual size: 17KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 608B

.reloc Size: 1.2MB - Virtual size: 1.2MB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

1d:3a:ee:35:0b:e1:ff:cc:0f:ff:bf:65:dc:ab:ac:f1
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

d6:27:dd:8a:d5:a3:b1:66:7e:32:fe:41:47:61:42:b7:88:9c:97:b2:72:b3:2c:f9:2f:61:7f:96:e4:a9:f8:9c
Signer

.text
Size: 37.1MB - Virtual size: 37.1MB

.data
Size: 97KB - Virtual size: 97KB

.rdata
Size: 4.3MB - Virtual size: 4.3MB

.bss
Size: - Virtual size: 58KB

.edata
Size: 9KB - Virtual size: 9KB

.idata
Size: 17KB - Virtual size: 17KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 608B

.reloc
Size: 1.2MB - Virtual size: 1.2MB