593e1af37603b21247cad64aae2306a0b5676c1f053acd92f4ab88b88de3231c

Sharing

Copy URL Twitter E-mail

General

Target

593e1af37603b21247cad64aae2306a0b5676c1f053acd92f4ab88b88de3231c
Size

14.4MB
MD5

222af538beb07af9126a2d8d628aae18
SHA1

420df0c7b918dc943fc86bfd22ffca6dad84a64b
SHA256

593e1af37603b21247cad64aae2306a0b5676c1f053acd92f4ab88b88de3231c
SHA512

38641aff5a139d18da7968efa0f57b7819236cbeff1571cd63b8c86fa234e9d05006b084ef88567986c115dd2eb0ec37333a05abcfc04259f7c882bc174a095e
SSDEEP

393216:7V6z3PuuICc1Ec1KCFhfIhaQe3C0ilNWhkoGWWw:B6jPuuICc1Ecgi6aQXxlwhkjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/qBittorrent/qBittorrent/qbittorrent.exe

Files

593e1af37603b21247cad64aae2306a0b5676c1f053acd92f4ab88b88de3231c
.rar
BT下载qBittorrent_v4.3.9.10_QB增强版_QB第三方编译版/qBittorrent.rar
.rar
qBittorrent/qBittorrent/Profile/qBittorrent/config/qBittorrent.ini
qBittorrent/qBittorrent/Profile/qBittorrent/config/rss/feeds.json
qBittorrent/qBittorrent/Profile/qBittorrent/config/watched_folders.json
qBittorrent/qBittorrent/Profile/qBittorrent/data/GeoDB/dbip-country-lite.mmdb
qBittorrent/qBittorrent/Profile/qBittorrent/data/logs/qbittorrent.log
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/Cpasbien-davy39.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/Cpasbien-mauricci.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/academictorrents.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/ali213.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/anidex.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/bakabt.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/btbit.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/btetree.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/cinecalidad.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/corsaroblu.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/corsaronero.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/corsarored.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/cpasbien.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/darklibria.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/demonoid.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/dmhyorg.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/elitetorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/ettv.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/extratorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/eztv.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/filelist.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/foxcili.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/horriblesubs-jac.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/horriblesubs-mauricci.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/horriblesubs.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/jackett.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/kickass_torrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/leetx.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/legittorrents.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/limetorrents.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/linuxtracker.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/lostfilm.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/magnetdl.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/mejor.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/ncore.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/nnmclub.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/nyaa.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/nyaapantsu.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/nyaasi.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/oxtorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/pantsu.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/pctfenix.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/pctreload.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/piratebay.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/rarbg.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/rockbox.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/rutor.py
.py .js
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/rutracker.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/skytorrents.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/smallgames.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/snowfl.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/solotorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/subtorrents.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/sukebei.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/sumotorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/threedm.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/tokyotoshokan.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/torlock.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/torrent9.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/torrentfunk.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/torrentgalaxy.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/torrentproject.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/torrentscsv.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/uniondht.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/yggtorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/yourbittorrent.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/yts.py
.py .sh linux
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/yts_am.py
qBittorrent/qBittorrent/Profile/qBittorrent/data/nova3/engines/zooqle.py
qBittorrent/qBittorrent/qbittorrent.exe
.exe windows:6 windows x86 arch:x86

b938b17aa32edc1b3eafb6de3b985386

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersAddresses
ConvertInterfaceLuidToNameW
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToIndex
NotifyUnicastIpAddressChange
ConvertInterfaceLuidToGuid
ConvertInterfaceNameToLuidW
CancelMibChangeNotify2

powrprof

SetSuspendState

user32

TrackMouseEvent
GetIconInfo
GetTouchInputInfo
CloseTouchInputHandle
GetWindowTextW
EnumWindows
RealGetWindowClassW
ChangeWindowMessageFilterEx
UnregisterDeviceNotification
DrawIconEx
GetAsyncKeyState
KillTimer
GetQueueStatus
SetTimer
CallNextHookEx
DestroyIcon
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
TranslateMessage
CharNextExA
DispatchMessageW
UnhookWindowsHookEx
PostThreadMessageW
GetCursor
GetCursorInfo
CreateIconIndirect
CreateCursor
AllowSetForegroundWindow
ShutdownBlockReasonCreate
ShutdownBlockReasonDestroy
LoadCursorW
SetCursorPos
GetClipboardFormatNameW
EnumDisplayDevicesW
RegisterClipboardFormatW
GetMenuItemInfoW
RegisterDeviceNotificationW
GetMessageExtraInfo
RegisterClassW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
SystemParametersInfoW
GetSystemMetrics
ReleaseDC
GetDesktopWindow
GetSysColor
GetDC
DestroyWindow
DefWindowProcW
UpdateLayeredWindowIndirect
GetCaretBlinkTime
GetDoubleClickTime
IsWindow
MessageBeep
EndPaint
BeginPaint
IsIconic
GetAncestor
InvalidateRect
SetForegroundWindow
ReleaseCapture
GetParent
EnableMenuItem
UpdateLayeredWindow
GetClientRect
SetWindowLongW
FlashWindowEx
SetCursor
SetCapture
SetParent
GetUpdateRect
SetFocus
SetLayeredWindowAttributes
UnregisterTouchWindow
MoveWindow
GetForegroundWindow
AttachThreadInput
SetWindowPlacement
IsChild
ClientToScreen
RegisterTouchWindow
GetCapture
ShowWindow
DestroyCursor
GetWindowPlacement
SetWindowTextW
SendMessageW
ScreenToClient
CreateWindowExW
SetWindowRgn
SetWindowPos
IsWindowVisible
GetMenu
GetWindowRect
GetWindow
MonitorFromPoint
PostMessageW
IsTouchWindow
AdjustWindowRectEx
GetSystemMenu
GetWindowThreadProcessId
GetWindowLongW
GetCursorPos
LoadImageW
GetSysColorBrush
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
GetKeyboardLayoutList
GetClassInfoW
WindowFromPoint
RegisterClassExW
ChildWindowFromPointEx
UnregisterClassW
GetFocus
ChangeClipboardChain
IsHungAppWindow
SetClipboardViewer
FindWindowA
RegisterWindowMessageW
ShowCaret
DestroyCaret
IsWindowEnabled
GetKeyboardLayout
CreateCaret
SetCaretPos
HideCaret
GetMonitorInfoW
EnumDisplayMonitors
MonitorFromWindow
ToAscii
IsZoomed
TrackPopupMenuEx
ToUnicode
PeekMessageW
SetMenuItemInfoW
GetKeyboardState
MapVirtualKeyW
GetKeyState
LoadIconW
CreateMenu
AppendMenuW
RemoveMenu
InsertMenuW
DrawMenuBar
DestroyMenu
SetMenu
TrackPopupMenu
CreatePopupMenu
ModifyMenuW

dbghelp

SymGetLineFromAddr64
StackWalk64
SymFromAddr
SymGetModuleInfo64
SymCleanup
SymSetContext
SymInitializeW
SymEnumSymbols

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

odbc32

ord20
ord154
ord165
ord29
ord24
ord145
ord147
ord139
ord13
ord26
ord75
ord127
ord12
ord176
ord108
ord30
ord18
ord44
ord152
ord140
ord61
ord111
ord43
ord72
ord9
ord138
ord141
ord136
ord31
ord119

uxtheme

GetThemeMargins
GetThemeInt
OpenThemeData
GetThemeColor
GetThemePartSize
GetThemeEnumValue
GetThemeTransitionDuration
GetThemePropertyOrigin
GetThemeBool
ord47
CloseThemeData
IsThemeBackgroundPartiallyTransparent
IsAppThemed
SetWindowTheme
GetThemeBackgroundRegion
GetCurrentThemeName
IsThemeActive

dwmapi

DwmGetWindowAttribute
DwmSetWindowAttribute
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow

oleaut32

SafeArrayCreateVector
SysAllocString
SysFreeString
SafeArrayPutElement

imm32

ImmGetVirtualKey
ImmGetDefaultIMEWnd
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmAssociateContext
ImmGetOpenStatus
ImmSetCandidateWindow
ImmAssociateContextEx
ImmNotifyIME

crypt32

CertEnumCertificatesInStore
CertCloseStore
CertFindCertificateInStore
CertOpenStore
CertAddCertificateContextToStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreA
CertOpenSystemStoreW
CertCreateCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertDuplicateCertificateContext

gdi32

AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
AddFontResourceExW
RemoveFontResourceExW
GetStockObject
GetTextFaceW
GetOutlineTextMetricsW
GetTextExtentPoint32W
SetGraphicsMode
GetGlyphOutlineW
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharABCWidthsW
SetTextColor
SetLayout
OffsetRgn
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
GdiFlush
CreateRectRgn
DeleteDC
GetRegionData
SelectClipRgn
DeleteObject
CombineRgn
SetBkMode
SetTextAlign
EnumFontFamiliesExW
ExtTextOutW
GetDIBits
GetDeviceCaps
CreateBitmap
CreateDCW
CreateCompatibleBitmap
GetObjectW
GetBitmapBits
CreateFontIndirectW
SetWorldTransform
GetFontData

advapi32

ReportEventW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumValueW
RegCreateKeyExW
GetEffectiveRightsFromAclW
AccessCheck
RegNotifyChangeKeyValue
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
GetTokenInformation
InitializeSecurityDescriptor
CryptDestroyKey
CryptGetUserKey
CryptAcquireContextW
CryptEnumProvidersW
CryptDecrypt
CryptExportKey
CryptCreateHash
CryptSetHashParam
CryptDestroyHash
CryptSignHashW
CryptGetProvParam
CryptReleaseContext
DeregisterEventSource
RegisterEventSourceW
RegFlushKey
LookupPrivilegeValueW
InitiateSystemShutdownW
AdjustTokenPrivileges
OpenProcessToken
GetUserNameW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
MapGenericMask
LookupAccountSidW
GetNamedSecurityInfoW
DuplicateToken
BuildTrusteeWithSidW
GetSidSubAuthority
GetSidSubAuthorityCount
SystemFunction036
CopySid

mpr

WNetGetUniversalNameW

userenv

GetUserProfileDirectoryW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

netapi32

NetShareEnum
NetApiBufferFree

ws2_32

WSAIoctl
gethostname
WSANtohs
WSAStartup
WSACleanup
WSAGetLastError
htonl
WSAStringToAddressW
WSASetLastError
ntohl
WSASendTo
WSARecvFrom
getpeername
WSAHtonl
WSASend
select
WSASocketW
WSARecv
getnameinfo
accept
bind
closesocket
listen
socket
connect
setsockopt
getsockname
WSANtohl
WSAConnect
WSAAsyncSelect
WSAAccept
getsockopt
ioctlsocket
__WSAFDIsSet
ntohs
WSAAddressToStringW
htons
getaddrinfo
freeaddrinfo

kernel32

AcquireSRWLockExclusive
InitializeCriticalSectionEx
RaiseException
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
GetExitCodeThread
InitOnceComplete
InitOnceBeginInitialize
LCMapStringEx
ReleaseSRWLockExclusive
EncodePointer
DecodePointer
GetCPInfo
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
RtlUnwind
LoadLibraryExW
SetConsoleCtrlHandler
SystemTimeToTzSpecificLocalTime
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
SetStdHandle
SetFileAttributesW
GetConsoleOutputCP
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
SetEnvironmentVariableW
InitializeSRWLock
VirtualAlloc
VirtualFree
GetGeoInfoW
GetUserGeoID
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
LCMapStringW
CompareStringW
GetDiskFreeSpaceExW
GetVolumeNameForVolumeMountPointW
FindNextChangeNotification
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
VirtualQuery
OpenFileMappingW
FileTimeToSystemTime
MoveFileExW
MoveFileW
GetCurrentDirectoryW
GetLogicalDrives
SetErrorMode
SetFileTime
GetFileInformationByHandleEx
GetVolumePathNamesForVolumeNameW
TzSpecificLocalTimeToSystemTime
GetStartupInfoW
GetModuleFileNameW
WriteFileEx
PeekNamedPipe
ReadFileEx
CancelIoEx
UnregisterWaitEx
RegisterWaitForSingleObject
GetUserPreferredUILanguages
GetTimeFormatW
GetDateFormatW
GetCurrencyFormatW
GetUserDefaultLCID
GetTickCount64
QueryPerformanceFrequency
ResumeThread
SetThreadPriority
GetThreadPriority
SwitchToThread
CreateThread
GetNativeSystemInfo
GetLocalTime
FormatMessageW
GetLastError
TlsAlloc
CloseHandle
LocalFree
WideCharToMultiByte
TlsFree
FormatMessageA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThread
WaitForMultipleObjects
CreateMutexW
WaitForSingleObject
ReleaseMutex
ProcessIdToSessionId
Sleep
OpenMutexW
MultiByteToWideChar
LoadLibraryW
GetProcAddress
GetVolumePathNameW
GetDriveTypeW
GetSystemDirectoryW
SetThreadExecutionState
VerSetConditionMask
VerifyVersionInfoW
SetLastError
GetStdHandle
WriteFile
GetEnvironmentVariableW
GetModuleHandleW
GetFileType
TlsSetValue
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetCurrentThreadId
DeleteCriticalSection
TlsGetValue
GetModuleHandleExW
DeleteFiber
SwitchToFiber
CreateFiber
GetSystemTimeAsFileTime
QueryPerformanceCounter
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryA
FreeLibrary
FindFirstFileW
FindNextFileW
FindClose
SetConsoleMode
ReadConsoleA
GetConsoleMode
ReadConsoleW
PostQueuedCompletionStatus
SetWaitableTimer
VerifyVersionInfoA
GetQueuedCompletionStatus
CreateEventW
SetEvent
TerminateThread
QueueUserAPC
SleepEx
CreateIoCompletionPort
GetFileAttributesExW
GetACP
CreateDirectoryW
RemoveDirectoryW
CreateHardLinkW
CreateFileW
GetFileInformationByHandle
DeleteFileW
CopyFileW
ReadFile
GetFileSizeEx
DeviceIoControl
SetEndOfFile
GetOverlappedResult
SetFilePointerEx
CreateEventA
CreateWaitableTimerA
CancelIo
GetModuleHandleA
GlobalMemoryStatusEx
lstrcmpW
WTSGetActiveConsoleSessionId
OpenProcess
CheckRemoteDebuggerPresent
GetLocaleInfoW
GlobalAlloc
GlobalLock
GlobalUnlock
ExpandEnvironmentStringsW
CreateProcessW
GlobalSize
GetUserDefaultLangID
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
HeapFree
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
UnlockFileEx
GetTempPathW
GetFileAttributesW
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetFileSize
GetProcessHeap
SystemTimeToFileTime
GetSystemTime
CreateFileMappingW
MapViewOfFile
GetTickCount
FlushFileBuffers
GetVolumeInformationW
GetLongPathNameW
LocalAlloc
GetConsoleWindow
ExitProcess
DisconnectNamedPipe
WaitNamedPipeW
CreateNamedPipeW
ConnectNamedPipe
ResetEvent
GlobalFree
SetHandleInformation
CompareStringEx
IsProcessorFeaturePresent
TerminateProcess
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
DuplicateHandle
GetExitCodeProcess
WriteConsoleW

ole32

CoUninitialize
CoCreateInstance
OleFlushClipboard
CoInitializeEx
DoDragDrop
ReleaseStgMedium
CoTaskMemFree
CoGetMalloc
CoCreateGuid
StringFromGUID2
OleIsCurrentClipboard
CoInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
OleInitialize
OleSetClipboard
OleGetClipboard

shell32

SHGetKnownFolderPath
Shell_NotifyIconGetRect
Shell_NotifyIconW
SHCreateItemFromIDList
SHGetPathFromIDListW
SHGetKnownFolderIDList
SHBrowseForFolderW
SHCreateItemFromParsingName
SHGetMalloc
ShellExecuteW
SHGetStockIconInfo
ord190
ord155
SHOpenFolderAndSelectItems
SHGetFileInfoW
SHChangeNotify
CommandLineToArgvW
ord727

winmm

PlaySoundW
timeSetEvent
timeKillEvent

mswsock

AcceptEx
GetAcceptExSockaddrs

bcrypt

BCryptGenRandom

Sections

.text
Size: 11.8MB - Virtual size: 11.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 468KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmimed
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qBittorrent/qBittorrent/qt.conf
qBittorrent/qBittorrent/translations/qt_zh_CN.qm
qBittorrent/qBittorrent/translations/qtbase_zh_CN.qm
qBittorrent/qBittorrent/真牛永久地址更新页.url
.url

Sharing

General

Malware Config

Signatures

Files

b938b17aa32edc1b3eafb6de3b985386

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

powrprof

user32

dbghelp

wtsapi32

odbc32

uxtheme

dwmapi

oleaut32

imm32

crypt32

gdi32

advapi32

mpr

userenv

version

netapi32

ws2_32

kernel32

ole32

shell32

winmm

mswsock

bcrypt

Sections

.text Size: 11.8MB - Virtual size: 11.8MB

.rdata Size: 8.6MB - Virtual size: 8.6MB

.data Size: 468KB - Virtual size: 538KB

.qtmetad Size: 1KB - Virtual size: 1KB

.qtmimed Size: 315KB - Virtual size: 315KB

.rsrc Size: 150KB - Virtual size: 149KB

.reloc Size: 459KB - Virtual size: 459KB

.text
Size: 11.8MB - Virtual size: 11.8MB

.rdata
Size: 8.6MB - Virtual size: 8.6MB

.data
Size: 468KB - Virtual size: 538KB

.qtmetad
Size: 1KB - Virtual size: 1KB

.qtmimed
Size: 315KB - Virtual size: 315KB

.rsrc
Size: 150KB - Virtual size: 149KB

.reloc
Size: 459KB - Virtual size: 459KB