28189e6e29fa68fd6f93b86beb5bf1f5

Sharing

Copy URL Twitter E-mail

General

Target

28189e6e29fa68fd6f93b86beb5bf1f5
Size

296KB
MD5

28189e6e29fa68fd6f93b86beb5bf1f5
SHA1

84bc6ec529548eaab64579bbc79ae8cc26627d37
SHA256

dfc89a121235febb884805f54e088489186f034d751334f0611bc0993ab7ccf3
SHA512

d35700953050c043442f3e841f7817d23e0370a5b433da45fa3bdb8e5fc2d36a9c40f49120aac9f415a7c0bf68b92048acc43e7fe95c3a0f7331893d8c46513d
SSDEEP

6144:fAkXHgrfoVfW8jWUod0X+jWTw8HuO9ZmeR6YF7gUPiS4YGabKd5Ge:fAkXHgrfoVfW8jWUuSTw8HuO9ZmS6Yd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28189e6e29fa68fd6f93b86beb5bf1f5

Files

28189e6e29fa68fd6f93b86beb5bf1f5
.exe windows:4 windows x86 arch:x86

2e238ca116879d1a15c4e97688ea8c8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qtcore4

_Z5qFreePv
_Z5qrandv
_Z6qsrandj
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray7reallocEi
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN4QUrlC1ERK7QString
_ZN4QUrlD1Ev
_ZN5QFile6existsERK7QString
_ZN6QTimer11setIntervalEi
_ZN6QTimer5startEi
_ZN6QTimer5startEv
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString7sprintfEPKcz
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QThread11qt_metacastEPKc
_ZN7QThread4exitEi
_ZN7QThread5startENS_8PriorityE
_ZN7QThreadC2EP7QObject
_ZN7QThreadD2Ev
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData5eraseEPPv
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData6insertEi
_ZN9QListData6removeEi
_ZNK11QMetaObject2trEPKcS1_
_ZNK7QObject10objectNameEv
_ZNK7QString11toLocal8BitEv
_ZNK7QString3argERKS_iRK5QChar
_ZNK7QString3argEyiiRK5QChar
_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString5toIntEPbi
_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE
_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString7toAsciiEv
_ZNK7QThread10metaObjectEv
_ZNK8QVariant8toStringEv

qtgui4

_ZN10QTabWidget10setTabTextEiRK7QString
_ZN10QTabWidget11setTabShapeENS_8TabShapeE
_ZN10QTabWidget12setElideModeEN2Qt13TextElideModeE
_ZN10QTabWidget14setTabPositionENS_11TabPositionE
_ZN10QTabWidget15setCurrentIndexEi
_ZN10QTabWidget20setUsesScrollButtonsEb
_ZN10QTabWidget6addTabEP7QWidgetRK7QString
_ZN10QTabWidget9removeTabEi
_ZN10QTabWidgetC1EP7QWidget
_ZN11QListWidget10insertItemEiRK7QString
_ZN11QListWidget15setItemSelectedEPK15QListWidgetItemb
_ZN11QListWidget5clearEv
_ZN11QListWidget8takeItemEi
_ZN11QListWidgetC1EP7QWidget
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox7warningEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QPushButton10setDefaultEb
_ZN11QPushButton14setAutoDefaultEb
_ZN11QPushButton7setFlatEb
_ZN11QPushButtonC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplication8setStyleEP6QStyle
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QTextBrowser20setOpenExternalLinksEb
_ZN12QTextBrowserC1EP7QWidget
_ZN15QAbstractButton10setCheckedEb
_ZN15QAbstractButton12setCheckableEb
_ZN15QAbstractButton7setTextERK7QString
_ZN15QPlastiqueStyleC1Ev
_ZN16QAbstractSpinBox12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN16QAbstractSpinBox14setAcceleratedEb
_ZN16QAbstractSpinBox16setButtonSymbolsENS_13ButtonSymbolsE
_ZN16QAbstractSpinBox19setSpecialValueTextERK7QString
_ZN16QDialogButtonBox18setStandardButtonsE6QFlagsINS_14StandardButtonEE
_ZN16QDialogButtonBoxC1EP7QWidget
_ZN5QFont12setPointSizeEi
_ZN5QFont12setUnderlineEb
_ZN5QFont9setWeightEi
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN5QMenu12addSeparatorEv
_ZN5QMenu4execERK6QPointP7QAction
_ZN5QMenuC1EP7QWidget
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN6QLabel13setTextFormatEN2Qt10TextFormatE
_ZN6QLabel20setOpenExternalLinksEb
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QSound4playEv
_ZN6QSoundC1ERK7QStringP7QObject
_ZN7QAction10setEnabledEb
_ZN7QAction7setTextERK7QString
_ZN7QActionC1ERK7QStringP7QObject
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget12setFixedSizeEii
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setFocusPolicyEN2Qt11FocusPolicyE
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget18setLayoutDirectionEN2Qt15LayoutDirectionE
_ZN7QWidget19setInputMethodHintsE6QFlagsIN2Qt15InputMethodHintEE
_ZN7QWidget20setContextMenuPolicyEN2Qt17ContextMenuPolicyE
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget21setAutoFillBackgroundEb
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7repaintEv
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setCursorERK7QCursor
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QSpinBox10setMaximumEi
_ZN8QSpinBox10setMinimumEi
_ZN8QSpinBox13setSingleStepEi
_ZN8QSpinBox8setRangeEii
_ZN8QSpinBox8setValueEi
_ZN8QSpinBox9setPrefixERK7QString
_ZN8QSpinBox9setSuffixERK7QString
_ZN8QSpinBoxC1EP7QWidget
_ZN9QCheckBox11setTristateEb
_ZN9QCheckBoxC1EP7QWidget
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBox11insertItemsEiRK11QStringList
_ZN9QComboBox15setCurrentIndexEi
_ZN9QComboBox5clearEv
_ZN9QComboBoxC1EP7QWidget
_ZN9QLineEdit12setMaxLengthEi
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZN9QTextEdit7setHtmlERK7QString
_ZNK10QTabWidget12currentIndexEv
_ZNK10QTabWidget7indexOfEP7QWidget
_ZNK11QListWidget10currentRowEv
_ZNK11QListWidget11currentItemEv
_ZNK11QListWidget4itemEi
_ZNK11QListWidget5countEv
_ZNK15QAbstractButton11isCheckableEv
_ZNK16QAbstractSpinBox4textEv
_ZNK17QAbstractItemView12currentIndexEv
_ZNK6QSound10isFinishedEv
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget11mapToGlobalERK6QPoint
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK8QSpinBox5valueEv
_ZNK9QCheckBox10checkStateEv
_ZNK9QComboBox12currentIndexEv
_ZNK9QComboBox5countEv
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

qtwebkit4

_ZN8QWebView4loadERK4QUrl
_ZN8QWebViewC1EP7QWidget
_ZNK8QWebPage9mainFrameEv
_ZNK8QWebView4pageEv
_ZNK9QWebFrame6toHtmlEv

kernel32

CloseHandle
CreateSemaphoreA
ExitProcess
FreeLibrary
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
OpenProcess
ReadProcessMemory
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteProcessMemory

mingwm10

__mingwthr_key_dtor

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fputc
fputs
free
fwrite
malloc
realloc
signal
sprintf
strcmp
strcpy
time

user32

FindWindowA
GetActiveWindow
GetMessageW
GetWindowThreadProcessId
RegisterHotKey
SetWindowTextA
UnregisterHotKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
__udivdi3

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 104B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e238ca116879d1a15c4e97688ea8c8b

Headers

File Characteristics

Imports

qtcore4

qtgui4

qtwebkit4

kernel32

mingwm10

msvcrt

user32

version

libgcc_s_dw2-1

Sections

.text Size: 168KB - Virtual size: 167KB

.data Size: 41KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.bss Size: - Virtual size: 104B

.idata Size: 15KB - Virtual size: 15KB

.rsrc Size: 61KB - Virtual size: 61KB

.text
Size: 168KB - Virtual size: 167KB

.data
Size: 41KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.bss
Size: - Virtual size: 104B

.idata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 61KB - Virtual size: 61KB