0cbddfb21ac1e5aa04e1ada10b813cff

Sharing

Copy URL Twitter E-mail

General

Target

0cbddfb21ac1e5aa04e1ada10b813cff
Size

331KB
MD5

0cbddfb21ac1e5aa04e1ada10b813cff
SHA1

383a44970c10ac4fe7d5d949c7c7d546851e1f5a
SHA256

3a2897106c9506b1cfd375f7b32a464b665a4f5c05ac8ccd2b0e638455cf691f
SHA512

25c0fc0dc5708d63a1434c18c30e26a6fded3296fa93fb42a0e3654acc3f5828dd5c91d4fad3dc71886224ebe6a14b234d515540999f109060aceaf5e1368a56
SSDEEP

6144:Kt601GDj7hZUPEdEmj+u+4+UjgMeqeXe8TQ+NOhDhVhCcrcd9v8ZEcww82hBZ7H2:CGDj5X7G0vHMsLU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbddfb21ac1e5aa04e1ada10b813cff

Files

0cbddfb21ac1e5aa04e1ada10b813cff
.dll windows:4 windows x86 arch:x86

93d882e5bf2d861de5636df18188c092

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libkopete

_ZN6Kopete18ChatSessionManager4selfEv
_ZN6Kopete6Plugin11deserializeEPNS_11MetaContactERK4QMapI7QStringS4_E
_ZN6Kopete6Plugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN6Kopete6Plugin11qt_metacastEPKc
_ZN6Kopete6Plugin13aboutToUnloadEv
_ZN6Kopete6Plugin16staticMetaObjectE
_ZN6Kopete6PluginC2ERK14KComponentDataP7QObject
_ZN6Kopete6PluginD2Ev
_ZN6Kopete7Message13setImportanceENS0_17MessageImportanceE
_ZN6Kopete7Message18setBackgroundColorERK6QColor
_ZN6Kopete7Message18setForegroundColorERK6QColor
_ZN6Kopete7Message8addClassERK7QString
_ZNK6Kopete7Message9directionEv
_ZNK6Kopete7Message9plainBodyEv

libkdecore

_Z5ki18nPKc
_ZN13KStandardDirs11locateLocalEPKcRK7QStringRK14KComponentData
_ZN14KComponentDataC1ERKS_
_ZN14KComponentDataC1Ev
_ZN14KComponentDataD1Ev
_ZN14KComponentDataaSERKS_
_ZN14KPluginFactory11qt_metacallEN11QMetaObject4CallEiPPv
_ZN14KPluginFactory11qt_metacastEPKc
_ZN14KPluginFactory12createObjectEP7QObjectPKcRK11QStringList
_ZN14KPluginFactory14registerPluginERK7QStringPK11QMetaObjectPFP7QObjectP7QWidgetS7_RK5QListI8QVariantEE
_ZN14KPluginFactory16createPartObjectEP7QWidgetP7QObjectPKcRK11QStringList
_ZN14KPluginFactory16setComponentDataERK14KComponentData
_ZN14KPluginFactory17setupTranslationsEv
_ZN14KPluginFactory6createEPKcP7QWidgetP7QObjectRK5QListI8QVariantERK7QString
_ZN14KPluginFactoryC2EPKcS1_P7QObject
_ZN14KPluginFactoryC2ERK10KAboutDataP7QObject
_ZN14KPluginFactoryD2Ev
_ZN16KLocalizedStringD1Ev
_ZN7KGlobal13mainComponentEv
_ZN9KSaveFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN9KSaveFileC1ERK7QStringRK14KComponentData
_ZN9KSaveFileD1Ev
_ZNK14KComponentData7isValidEv
_ZNK14KPluginFactory10metaObjectEv
_ZNK14KPluginFactory13componentDataEv
_ZNK16KLocalizedString8toStringEv

libkdeui

_ZN13KXMLGUIClient10setXMLFileERK7QStringbb
_ZN13KXMLGUIClient12stateChangedERK7QStringNS_18ReverseStateChangeE
_ZN13KXMLGUIClient12virtual_hookEiPv
_ZN13KXMLGUIClient14setDOMDocumentERK12QDomDocumentb
_ZN13KXMLGUIClient15setLocalXMLFileERK7QString
_ZN13KXMLGUIClient16setComponentDataERK14KComponentData
_ZN13KXMLGUIClient6setXMLERK7QStringb
_ZNK13KXMLGUIClient11domDocumentEv
_ZNK13KXMLGUIClient12localXMLFileEv
_ZNK13KXMLGUIClient13componentDataEv
_ZNK13KXMLGUIClient16actionCollectionEv
_ZNK13KXMLGUIClient6actionERK11QDomElement
_ZNK13KXMLGUIClient7xmlFileEv

qtcore4

_Z5qFreePv
_Z6qFatalPKcz
_ZN10QByteArrayC1EPKc
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN11QMetaObject11changeGuardEPP7QObjectS1_
_ZN11QMetaObject11removeGuardEPP7QObject
_ZN11QTextStream8setCodecEP10QTextCodec
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsERK7QString
_ZN5QCharC1Ec
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE
_ZN7QRegExpD1Ev
_ZN7QString10fromLatin1EPKci
_ZN7QString11shared_nullE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString6numberEii
_ZN7QString6numberEji
_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE
_ZN7QString7replaceERK7QRegExpRKS_
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6removeEi
_ZN9QListData7detach3Ev
_ZNK11QMetaObject4castEP7QObject
_ZNK7QString6toUIntEPbi
_ZNK7QString7indexOfERK7QRegExpi
_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QStringeqERKS_

qtgui4

_ZN2Qt6escapeERK7QString
_ZN6QColor10invalidateEv
_ZN6QColor13setNamedColorERK7QString
_ZN6QColoraSERKS_
_ZNK6QColor4nameEv

qtxml4

_ZN12QDomDocument10setContentEP9QIODeviceP7QStringPiS4_
_ZN12QDomDocumentC1ERK7QString
_ZN12QDomDocumentD1Ev
_ZN8QDomNodeD1Ev
_ZN8QDomNodeD2Ev
_ZN8QDomNodeaSERKS_
_ZNK11QDomElement4textEv
_ZNK11QDomElement7tagNameEv
_ZNK11QDomElement9attributeERK7QStringS2_
_ZNK12QDomDocument15documentElementEv
_ZNK8QDomNode10firstChildEv
_ZNK8QDomNode11nextSiblingEv
_ZNK8QDomNode6isNullEv
_ZNK8QDomNode9toElementEv

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_write
__dllonexit
_errno
_iob
_winmajor
abort
calloc
fflush
fputc
fputs
free
fwrite
malloc
memcpy
realloc
sprintf
strcmp
strcpy
vfprintf

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info

Exports

Exports

_ZGVZ13qvariant_castI8QVariantET_RKS0_E3vid
_ZN14KPluginFactory14createInstanceI15HighlightPlugin7QObjectEEPS2_P7QWidgetS3_RK5QListI8QVariantE
_ZN15HighlightConfig12appendFilterEP6Filter
_ZN15HighlightConfig12removeFilterEP6Filter
_ZN15HighlightConfig4loadEv
_ZN15HighlightConfig4saveEv
_ZN15HighlightConfig9newFilterEv
_ZN15HighlightConfigC1Ev
_ZN15HighlightConfigC2Ev
_ZN15HighlightConfigD1Ev
_ZN15HighlightConfigD2Ev
_ZN15HighlightPlugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN15HighlightPlugin11qt_metacastEPKc
_ZN15HighlightPlugin13pluginStatic_E
_ZN15HighlightPlugin16staticMetaObjectE
_ZN15HighlightPlugin19slotIncomingMessageERN6Kopete7MessageE
_ZN15HighlightPlugin19slotSettingsChangedEv
_ZN15HighlightPlugin6pluginEv
_ZN15HighlightPluginC1EP7QObjectRK5QListI8QVariantE
_ZN15HighlightPluginC2EP7QObjectRK5QListI8QVariantE
_ZN15HighlightPluginD0Ev
_ZN15HighlightPluginD1Ev
_ZN15HighlightPluginD2Ev
_ZN22HighlightPluginFactory13componentDataEv
_ZN22HighlightPluginFactory4initEv
_ZN22HighlightPluginFactoryC1EPKcS1_P7QObject
_ZN22HighlightPluginFactoryC1ERK10KAboutDataP7QObject
_ZN22HighlightPluginFactoryC2EPKcS1_P7QObject
_ZN22HighlightPluginFactoryC2ERK10KAboutDataP7QObject
_ZN22HighlightPluginFactoryD0Ev
_ZN22HighlightPluginFactoryD1Ev
_ZN22HighlightPluginFactoryD2Ev
_ZN5QListIP6FilterE13detach_helperEv
_ZN5QListIP6FilterE5clearEv
_ZN5QListIP6FilterE6appendERKS1_
_ZN5QListIP6FilterED1Ev
_ZN6FilterC1Ev
_ZN6FilterC2Ev
_ZN6FilterD1Ev
_ZN6FilterD2Ev
_ZN7QStringD1Ev
_ZNK15HighlightConfig7filtersEv
_ZNK15HighlightPlugin10metaObjectEv
_ZNK6Filter9classNameEv
_ZTI13KXMLGUIClient
_ZTI14KPluginFactory
_ZTI15HighlightPlugin
_ZTI22HighlightPluginFactory
_ZTI7QObject
_ZTIN6Kopete6PluginE
_ZTS13KXMLGUIClient
_ZTS14KPluginFactory
_ZTS15HighlightPlugin
_ZTS22HighlightPluginFactory
_ZTS7QObject
_ZTSN6Kopete6PluginE
_ZTV15HighlightPlugin
_ZTV22HighlightPluginFactory
_ZThn8_N15HighlightPluginD0Ev
_ZThn8_N15HighlightPluginD1Ev
kde_plugin_verification_data
qt_plugin_instance
qt_plugin_query_verification_data

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 372B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/118
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93d882e5bf2d861de5636df18188c092

Headers

File Characteristics

Imports

libkopete

libkdecore

libkdeui

qtcore4

qtgui4

qtxml4

kernel32

msvcrt

libgcc_s_dw2-1

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 8KB

/4 Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 372B

.edata Size: 3KB - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 4KB - Virtual size: 3KB

/14 Size: 1KB - Virtual size: 1KB

/29 Size: 4KB - Virtual size: 4KB

/45 Size: 79KB - Virtual size: 78KB

/57 Size: 13KB - Virtual size: 12KB

/71 Size: 14KB - Virtual size: 13KB

/83 Size: 5KB - Virtual size: 4KB

/96 Size: 2KB - Virtual size: 1KB

/107 Size: 27KB - Virtual size: 27KB

/118 Size: 7KB - Virtual size: 6KB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 8KB

/4
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 372B

.edata
Size: 3KB - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 4KB - Virtual size: 3KB

/14
Size: 1KB - Virtual size: 1KB

/29
Size: 4KB - Virtual size: 4KB

/45
Size: 79KB - Virtual size: 78KB

/57
Size: 13KB - Virtual size: 12KB

/71
Size: 14KB - Virtual size: 13KB

/83
Size: 5KB - Virtual size: 4KB

/96
Size: 2KB - Virtual size: 1KB

/107
Size: 27KB - Virtual size: 27KB

/118
Size: 7KB - Virtual size: 6KB