45753be9a11ea213cc1094576367ac5bfa5f588d0214aea1de13bb7574dd7f37

Sharing

Copy URL Twitter E-mail

General

Target

45753be9a11ea213cc1094576367ac5bfa5f588d0214aea1de13bb7574dd7f37
Size

1.5MB
MD5

132dd724a5581d1a4ec7cccc0d35ac48
SHA1

0667a8b59a713230e7c2e0f2d0a24ea22c7ffa97
SHA256

45753be9a11ea213cc1094576367ac5bfa5f588d0214aea1de13bb7574dd7f37
SHA512

4132bd725afae864c331c58bba990ebac1e721a5d87528784179dd976cd4634f4f33b75354693e3c4a93395aadd4970117a6bcd75574fecb3969962b5861a724
SSDEEP

12288:AgvmBDmpmQn44aumlCSRBW8NGRP4Q+Eaw8lKnJlTxIWU8DUDwFi:AxqpNnfmlbBW8sRPEbyJlTaN8D1o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45753be9a11ea213cc1094576367ac5bfa5f588d0214aea1de13bb7574dd7f37

Files

45753be9a11ea213cc1094576367ac5bfa5f588d0214aea1de13bb7574dd7f37
.exe windows x86

67631ffe4b0d9c04e28ef7feeda79192

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qtcore4

?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?staticMetaObject@QThread@@2UQMetaObject@@B
?qt_metacall@QThread@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QThread@@UAEPAXPBD@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
?qRegisterResourceData@@YA_NHPBE00@Z
?append@QListData@@QAEPAPAXXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?toUtf8@QString@@QBE?AVQByteArray@@XZ
?detach@QByteArray@@QAEXXZ
?currentDateTimeUtc@QDateTime@@SA?AV1@XZ
?toLocalTime@QDateTime@@QBE?AV1@XZ
?toString@QDateTime@@QBE?AVQString@@ABV2@@Z
?arg@QString@@QBE?AV1@_JHHABVQChar@@@Z
?toLongLong@QString@@QBE_JPA_NH@Z
?fromMSecsSinceEpoch@QDateTime@@SA?AV1@_J@Z
?toStdWString@QString@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
??0QThread@@QAE@PAVQObject@@@Z
??1QThread@@UAE@XZ
?grow@QVectorData@@SAHHHH_N@Z
?reallocate@QVectorData@@SAPAU1@PAU1@HHH@Z
?qMemSet@@YAPAXPAXHI@Z
?utf16@QString@@QBEPBGXZ
?start@QThread@@QAEXW4Priority@1@@Z
?allocate@QVectorData@@SAPAU1@HH@Z
?qBadAlloc@@YAXXZ
?free@QVectorData@@SAXPAU1@H@Z
?shared_null@QVectorData@@2U1@A
?clear@QString@@QAEXXZ
?currentDateTime@QDateTime@@SA?AV1@XZ
?toMSecsSinceEpoch@QDateTime@@QBE_JXZ
??1QDateTime@@QAE@XZ
??0QUrl@@QAE@ABVQString@@@Z
??1QUrl@@QAE@XZ
?exit@QCoreApplication@@SAXH@Z
??8QString@@QBE_NABV0@@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?arg@QString@@QBE?AV1@ABV1@HABVQChar@@@Z
?addLibraryPath@QCoreApplication@@SAXABVQString@@@Z
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
?toInt@QString@@QBEHPA_NH@Z
?shared_null@QListData@@2UData@1@A
??8QString@@QBE_NPBD@Z
?atEnd@QFile@@UBE_NXZ
?readLine@QIODevice@@QAE?AVQByteArray@@_J@Z
?qFree@@YAXPAX@Z
??0QString@@QAE@ABVQByteArray@@@Z
?replace@QString@@QAEAAV1@ABV1@0W4CaseSensitivity@Qt@@@Z
?lastIndexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
?mid@QString@@QBE?AV1@HH@Z
??1QByteArray@@QAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QTextStream@@QAE@PAVQIODevice@@@Z
?setCodec@QTextStream@@QAEXPBD@Z
?atEnd@QTextStream@@QBE_NXZ
?left@QString@@QBE?AV1@H@Z
?readLine@QTextStream@@QAE?AVQString@@_J@Z
??1QString@@QAE@XZ
?indexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
?right@QString@@QBE?AV1@H@Z
?close@QFile@@UAEXXZ
??1QTextStream@@UAE@XZ
??1QFile@@UAE@XZ
??MQString@@QBE_NABV0@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?toWCharArray@QString@@QBEHPAG@Z
?fromWCharArray@QString@@SA?AV1@PBGH@Z
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
?number@QString@@SA?AV1@HH@Z
??0QVariant@@QAE@ABVQString@@@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?toInt@QVariant@@QBEHPA_N@Z
??1QVariant@@QAE@XZ
??1QSettings@@UAE@XZ
??0QString@@QAE@ABV0@@Z
?shared_null@QString@@0UData@1@A
??4QString@@QAEAAV0@ABV0@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?installEventFilter@QObject@@QAEXPAV1@@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?free@QString@@CAXPAUData@1@@Z
?qWinMain@@YAXPAUHINSTANCE__@@0PADHAAHAAV?$QVector@PAD@@@Z

qtgui4

?metaObject@QHBoxLayout@@UBEPBUQMetaObject@@XZ
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?winEvent@QWidget@@MAE_NPAUtagMSG@@PAJ@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
??1QDialog@@UAE@XZ
?event@QWidget@@MAE_NPAVQEvent@@@Z
?setVisible@QDialog@@UAEX_N@Z
?sizeHint@QDialog@@UBE?AVQSize@@XZ
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?heightForWidth@QWidget@@UBEHH@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?staticMetaObject@QTextEdit@@2UQMetaObject@@B
?qt_metacall@QTextEdit@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QTextEdit@@UAEPAXPBD@Z
?staticMetaObject@QDialog@@2UQMetaObject@@B
?qt_metacall@QDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QDialog@@UAEPAXPBD@Z
?staticMetaObject@QWidget@@2UQMetaObject@@B
??0QPixmap@@QAE@ABVQString@@PBDV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?height@QPixmap@@QBEHXZ
?width@QPixmap@@QBEHXZ
??1QPixmap@@UAE@XZ
??0QPen@@QAE@XZ
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z
?setBrush@QPen@@QAEXABVQBrush@@@Z
??1QBrush@@QAE@XZ
?setDashPattern@QPen@@QAEXABV?$QVector@N@@@Z
?setWidth@QPen@@QAEXH@Z
?setPen@QPainter@@QAEXABVQPen@@@Z
?drawLines@QPainter@@QAEXPBVQLine@@H@Z
??1QPen@@QAE@XZ
??0QIcon@@QAE@ABVQString@@@Z
?setWindowIcon@QWidget@@QAEXABVQIcon@@@Z
??1QIcon@@QAE@XZ
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?setOpenExternalLinks@QLabel@@QAEX_N@Z
??0QVBoxLayout@@QAE@XZ
?setFixedWidth@QWidget@@QAEXH@Z
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?resizeEvent@QDialog@@MAEXPAVQResizeEvent@@@Z
?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?setMinimumHeight@QWidget@@QAEXH@Z
??0QFont@@QAE@ABV0@@Z
?setMaximumWidth@QWidget@@QAEXH@Z
?setToolTip@QWidget@@QAEXABVQString@@@Z
?openUrl@QDesktopServices@@SA_NABVQUrl@@@Z
?rect@QWidget@@QBE?AVQRect@@XZ
?hide@QWidget@@QAEXXZ
?setFixedHeight@QWidget@@QAEXH@Z
?showMinimized@QWidget@@QAEXXZ
?pos@QWidget@@QBE?AVQPoint@@XZ
?mapToGlobal@QWidget@@QBE?AVQPoint@@ABV2@@Z
??0QPainter@@QAE@PAVQPaintDevice@@@Z
?setRgb@QColor@@QAEXHHHH@Z
?fillRect@QPainter@@QAEXABVQRect@@ABVQColor@@@Z
??1QPainter@@QAE@XZ
?setDisabled@QWidget@@QAEX_N@Z
?reason@QFocusEvent@@QAE?AW4FocusReason@Qt@@XZ
?clear@QTextEdit@@QAEXXZ
?focusInEvent@QTextEdit@@MAEXPAVQFocusEvent@@@Z
?toPlainText@QTextEdit@@QBE?AVQString@@XZ
?setHtml@QTextEdit@@QAEXABVQString@@@Z
?insertFromMimeData@QTextEdit@@MAEXPBVQMimeData@@@Z
?canInsertFromMimeData@QTextEdit@@MBE_NPBVQMimeData@@@Z
?createMimeDataFromSelection@QTextEdit@@MBEPAVQMimeData@@XZ
?loadResource@QTextEdit@@UAE?AVQVariant@@HABVQUrl@@@Z
?scrollContentsBy@QTextEdit@@MAEXHH@Z
?viewportEvent@QAbstractScrollArea@@MAE_NPAVQEvent@@@Z
?focusNextPrevChild@QTextEdit@@MAE_N_N@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?inputMethodQuery@QTextEdit@@MBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QTextEdit@@MAEXPAVQInputMethodEvent@@@Z
?changeEvent@QTextEdit@@MAEXPAVQEvent@@@Z
?showEvent@QTextEdit@@MAEXPAVQShowEvent@@@Z
?dropEvent@QTextEdit@@MAEXPAVQDropEvent@@@Z
?dragLeaveEvent@QTextEdit@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QTextEdit@@MAEXPAVQDragMoveEvent@@@Z
?dragEnterEvent@QTextEdit@@MAEXPAVQDragEnterEvent@@@Z
?contextMenuEvent@QTextEdit@@MAEXPAVQContextMenuEvent@@@Z
?resizeEvent@QTextEdit@@MAEXPAVQResizeEvent@@@Z
?paintEvent@QTextEdit@@MAEXPAVQPaintEvent@@@Z
?keyReleaseEvent@QTextEdit@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QTextEdit@@MAEXPAVQKeyEvent@@@Z
?wheelEvent@QTextEdit@@MAEXPAVQWheelEvent@@@Z
?mouseMoveEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QAbstractScrollArea@@UBE?AVQSize@@XZ
?sizeHint@QAbstractScrollArea@@UBE?AVQSize@@XZ
?timerEvent@QTextEdit@@MAEXPAVQTimerEvent@@@Z
?event@QTextEdit@@MAE_NPAVQEvent@@@Z
??0QTextEdit@@QAE@PAVQWidget@@@Z
?setLayoutDirection@QWidget@@QAEXW4LayoutDirection@Qt@@@Z
??1QTextEdit@@UAE@XZ
??0QApplication@@QAE@AAHPAPADH@Z
??1QApplication@@UAE@XZ
?show@QWidget@@QAEXXZ
?exec@QApplication@@SAHXZ
??0QFont@@QAE@XZ
?setPixelSize@QFont@@QAEXH@Z
?setFamily@QFont@@QAEXABVQString@@@Z
??0QFontMetrics@@QAE@ABVQFont@@@Z
?boundingRect@QFontMetrics@@QBE?AVQRect@@ABVQString@@@Z
??1QFontMetrics@@QAE@XZ
??0QDialog@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?setWindowFlags@QWidget@@QAEXV?$QFlags@W4WindowType@Qt@@@@@Z
?buttons@QMouseEvent@@QBE?AV?$QFlags@W4MouseButton@Qt@@@@XZ
?frameGeometry@QWidget@@QBE?AVQRect@@XZ
?pos@QCursor@@SA?AVQPoint@@XZ
??1QVBoxLayout@@UAE@XZ
??1QHBoxLayout@@UAE@XZ
??1QLabel@@UAE@XZ
??1QPushButton@@UAE@XZ
??1QWidget@@UAE@XZ
?qt_metacall@QVBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QVBoxLayout@@UAEPAXPBD@Z
?metaObject@QVBoxLayout@@UBEPBUQMetaObject@@XZ
?spacerItem@QLayoutItem@@UAEPAVQSpacerItem@@XZ
?layout@QLayout@@UAEPAV1@XZ
?widget@QLayoutItem@@UAEPAVQWidget@@XZ
?invalidate@QBoxLayout@@UAEXXZ
?minimumHeightForWidth@QBoxLayout@@UBEHH@Z
?heightForWidth@QBoxLayout@@UBEHH@Z
?hasHeightForWidth@QBoxLayout@@UBE_NXZ
?isEmpty@QLayout@@UBE_NXZ
?geometry@QLayout@@UBE?AVQRect@@XZ
?setGeometry@QBoxLayout@@UAEXABVQRect@@@Z
?expandingDirections@QBoxLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?maximumSize@QBoxLayout@@UBE?AVQSize@@XZ
?minimumSize@QBoxLayout@@UBE?AVQSize@@XZ
?sizeHint@QBoxLayout@@UBE?AVQSize@@XZ
?count@QBoxLayout@@UBEHXZ
?indexOf@QLayout@@UBEHPAVQWidget@@@Z
?takeAt@QBoxLayout@@UAEPAVQLayoutItem@@H@Z
?itemAt@QBoxLayout@@UBEPAVQLayoutItem@@H@Z
?addItem@QBoxLayout@@UAEXPAVQLayoutItem@@@Z
?childEvent@QLayout@@MAEXPAVQChildEvent@@@Z
?qt_metacall@QHBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QHBoxLayout@@UAEPAXPBD@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?focusNextPrevChild@QLabel@@MAE_N_N@Z
?changeEvent@QLabel@@MAEXPAVQEvent@@@Z
?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z
?paintEvent@QLabel@@MAEXPAVQPaintEvent@@@Z
?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?keyPressEvent@QLabel@@MAEXPAVQKeyEvent@@@Z
?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?heightForWidth@QLabel@@UBEHH@Z
?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ
?sizeHint@QLabel@@UBE?AVQSize@@XZ
?event@QLabel@@MAE_NPAVQEvent@@@Z
?qt_metacall@QLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QLabel@@UAEPAXPBD@Z
?metaObject@QLabel@@UBEPBUQMetaObject@@XZ
?nextCheckState@QAbstractButton@@MAEXXZ
?checkStateSet@QAbstractButton@@MAEXXZ
?hitButton@QAbstractButton@@MBE_NABVQPoint@@@Z
?changeEvent@QAbstractButton@@MAEXPAVQEvent@@@Z
?paintEvent@QPushButton@@MAEXPAVQPaintEvent@@@Z
?focusOutEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?keyReleaseEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QPushButton@@MAEXPAVQKeyEvent@@@Z
?mouseMoveEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QPushButton@@UBE?AVQSize@@XZ
?sizeHint@QPushButton@@UBE?AVQSize@@XZ
?timerEvent@QAbstractButton@@MAEXPAVQTimerEvent@@@Z
?event@QPushButton@@MAE_NPAVQEvent@@@Z
?qt_metacall@QPushButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QPushButton@@UAEPAXPBD@Z
?metaObject@QPushButton@@UBEPBUQMetaObject@@XZ
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?setVisible@QWidget@@UAEX_N@Z
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?metaObject@QWidget@@UBEPBUQMetaObject@@XZ
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
??0QPushButton@@QAE@PAVQWidget@@@Z
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
??0QHBoxLayout@@QAE@PAVQWidget@@@Z
?setContentsMargins@QLayout@@QAEXHHHH@Z
?setSpacing@QBoxLayout@@QAEXH@Z
?addSpacing@QBoxLayout@@QAEXH@Z
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?addStretch@QBoxLayout@@QAEXH@Z
?setAlignment@QLayout@@QAE_NPAVQWidget@@V?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?setWordWrap@QLabel@@QAEX_N@Z
??0QHBoxLayout@@QAE@XZ
??0QVBoxLayout@@QAE@PAVQWidget@@@Z
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z
?close@QWidget@@QAE_NXZ
?exec@QDialog@@QAEHXZ
?move@QWidget@@QAEXABVQPoint@@@Z
?setStyleSheet@QWidget@@QAEXABVQString@@@Z
?setFont@QWidget@@QAEXABVQFont@@@Z
??1QFont@@QAE@XZ
?setMinimumSize@QWidget@@QAEXHH@Z
?setFixedSize@QWidget@@QAEXHH@Z
?setText@QLabel@@QAEXABVQString@@@Z
?setText@QAbstractButton@@QAEXABVQString@@@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?releaseDC@QWidget@@UBEXPAUHDC__@@@Z
?getDC@QWidget@@UBEPAUHDC__@@XZ
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?devType@QWidget@@UBEHXZ
?reject@QDialog@@UAEXXZ
?accept@QDialog@@UAEXXZ
?done@QDialog@@UAEXH@Z
?languageChange@QWidget@@MAEXXZ
?windowActivationChange@QWidget@@MAEX_N@Z
?fontChange@QWidget@@MAEXABVQFont@@@Z
?paletteChange@QWidget@@MAEXABVQPalette@@@Z
?enabledChange@QWidget@@MAEX_N@Z
?styleChange@QWidget@@MAEXAAVQStyle@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z

libssl-1_1

SSL_CTX_new
TLS_client_method
OPENSSL_init_ssl
SSL_connect
SSL_new
SSL_free
SSL_write
SSL_read
SSL_CTX_free
SSL_shutdown
SSL_set_fd

rpcrt4

RpcBindingFree
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
NdrClientCall2
UuidCreate

comn

GetObjectSys
GetObjectLang
GetObjectLog

googleanalyinter

GetObjSendClass

kernel32

GetFileSize
SetFilePointer
ReadFile
lstrlenW
GetModuleFileNameA
CreateProcessW
GetPrivateProfileStringA
GetNativeSystemInfo
CreateThread
GetStartupInfoW
DeleteFileW
IsBadReadPtr
FlushFileBuffers
WriteFile
SetFileAttributesW
SetFilePointerEx
CreateDirectoryW
IsBadWritePtr
GetFileSizeEx
CopyFileW
Sleep
GetFileAttributesA
GetSystemTime
FindResourceExW
GetStdHandle
FindResourceW
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetModuleHandleW
SizeofResource
GetTempPathW
lstrlenA
ReadConsoleW
LockResource
SetConsoleTextAttribute
DeleteCriticalSection
GetLocalTime
AllocConsole
GetConsoleWindow
GetProcAddress
GetCurrentProcess
CreateFileW
CloseHandle
SetLastError
LocalFree
LoadLibraryW
WriteConsoleW
GetModuleFileNameW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetComputerNameW
GetFileAttributesW
FindClose
GetCommandLineW
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetVersionExW
FindNextFileW
RemoveDirectoryW
FindFirstFileW
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileIntW
LoadResource
GetLastError

user32

UnregisterClassA
GetSystemMenu
GetSystemMetrics
wsprintfW
DeleteMenu

advapi32

RegQueryInfoKeyW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
ConvertStringSidToSidW
RegCreateKeyExW
RegLoadKeyW
RegDeleteKeyW
RegEnumKeyExW
LookupPrivilegeValueW
RegUnLoadKeyW
RegDeleteValueW
RegEnumValueW
SetSecurityInfo
OpenProcessToken
AdjustTokenPrivileges
RegFlushKey
RegOpenKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegGetKeySecurity
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetKeySecurity
RegCreateKeyW
RegSetValueExW

shell32

SHGetFolderPathW

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?allocate@?$allocator@G@std@@QAEPAGI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@G@std@@QAEXPAGI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBG@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr80

__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
wcsrchr
memset
wcscat_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
memcpy
printf
strrchr
wcschr
_vswprintf
sprintf
_purecall
_itow
wcscpy_s
wcstombs
rand
srand
atoi
_wtoi
memmove_s
_wcsicmp
_wcsnicmp
??_V@YAXPAX@Z
wprintf
malloc
free
_vsnprintf
_vsnwprintf
sprintf_s
vswprintf_s
memcpy_s
_vscwprintf
vsprintf_s
_vscprintf
_except_handler4_common
_unlock
__p__commode
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
__dllonexit

ws2_32

htons
connect
inet_addr
gethostbyname
listen
accept
closesocket
bind
recv
send
socket
WSAStartup
WSAGetLastError
WSACleanup

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

PathIsDirectoryW
PathFindExtensionW
PathFileExistsW
PathFindFileNameW

winhttp

WinHttpConnect
WinHttpQueryHeaders
WinHttpOpen
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpSetOption
WinHttpWriteData

Exports

Exports

GetObjGATrackingData

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67631ffe4b0d9c04e28ef7feeda79192

Headers

File Characteristics

Imports

qtcore4

qtgui4

libssl-1_1

rpcrt4

comn

googleanalyinter

kernel32

user32

advapi32

shell32

msvcp80

msvcr80

ws2_32

version

shlwapi

winhttp

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 4KB - Virtual size: 1.0MB

.rsrc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 4KB - Virtual size: 1.0MB

.rsrc
Size: 1.2MB - Virtual size: 1.8MB