easy_Malicious_167235672c04454262053a2b07f70b35323c1e5cfee658d030f7899da83f6720[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Malicious_167235672c04454262053a2b07f70b35323c1e5cfee658d030f7899da83f6720.dll
Size

274KB
MD5

bd17302ea92d1b2f42e1ebce6d4c8e1a
SHA1

1e006fa60e8ec9c9c9cf0b48d6985e1c6d298d54
SHA256

68b6473cff85b78665bb1f5ab9a09e2e2cbc7d34847a07c0da5d16941f71fb5b
SHA512

a5044059bbc6b6e2db45e073513bb418b40501d59f697cb59213867ed72adca0c87a4aad1ef13241f89d05d191b673ad0a1751160c12d18816901a7c17d59eb1
SSDEEP

3072:4u1gLbLneL0wKw3LCms9PQcLwI2T2VtTzJUOuFBKKOyBTWbpdiwh0wNxGeMGIpYj:4ueKXGpp24AB9OyBA7iwtAN0mRM+zoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Malicious_167235672c04454262053a2b07f70b35323c1e5cfee658d030f7899da83f6720.dll

Files

easy_Malicious_167235672c04454262053a2b07f70b35323c1e5cfee658d030f7899da83f6720.dll
.dll windows x86

4d6e61e3b0a6eee1a5467f35e0dd325c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qtcore4

?append2@QListData@@QAEPAPAXABU1@@Z
?changeGuard@QMetaObject@@SAXPAPAVQObject@@PAV2@@Z
?removeGuard@QMetaObject@@SAXPAPAVQObject@@@Z
??1QTextCodecPlugin@@UAE@XZ
?create@QTextCodecPlugin@@EAEPAVQTextCodec@@ABVQString@@@Z
?keys@QTextCodecPlugin@@EBE?AVQStringList@@XZ
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?qt_metacall@QTextCodecPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QTextCodecPlugin@@UAEPAXPBD@Z
?metaObject@QTextCodecPlugin@@UBEPBUQMetaObject@@XZ
??0QTextCodecPlugin@@QAE@PAVQObject@@@Z
?append@QListData@@QAEPAPAXXZ
?detach@QListData@@QAEPAUData@1@H@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?shared_null@QString@@0UData@1@A
?resize@QString@@QAEXH@Z
?realloc@QString@@AAEXXZ
??1QString@@QAE@XZ
?shared_null@QByteArray@@0UData@1@A
?resize@QByteArray@@QAEXH@Z
?detach@QByteArray@@QAEXXZ
??1QByteArray@@QAE@XZ
?qFree@@YAXPAX@Z
?shared_null@QListData@@2UData@1@A
??1QTextCodec@@MAE@XZ
??0QByteArray@@QAE@PBD@Z
??0QTextCodec@@IAE@XZ

msvcr90

__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler3
memcpy
??2@YAPAXI@Z
_unlock

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

qt_plugin_instance
qt_plugin_query_verification_data

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d6e61e3b0a6eee1a5467f35e0dd325c

Headers

File Characteristics

Imports

qtcore4

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 121KB - Virtual size: 120KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text Size: 136KB - Virtual size: 136KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 121KB - Virtual size: 120KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 136KB - Virtual size: 136KB