3f56479e35b3db1af2ebb48bce08f95d2a57063f3fe35589a3603b5914e04d26

Sharing

Copy URL

Twitter E-mail

General

Target

3f56479e35b3db1af2ebb48bce08f95d2a57063f3fe35589a3603b5914e04d26
Size

213KB
MD5

f02a13c32f17d235bdc036dbab1000f6
SHA1

cc915cfb738d39b7bf9b7691ef766a9cb4f33f2d
SHA256

3f56479e35b3db1af2ebb48bce08f95d2a57063f3fe35589a3603b5914e04d26
SHA512

3694667f2c8496fae80222ae4e1b7bdaee17a6fbef7adb41605bf331bc60c8a538e2234361b3b2288f70262c00380039bbefd8723afa492a4bd070eb497b4f54
SSDEEP

6144:ToxUX8eXOnIHyUsBGo1ito06044+6+sryApr0OZY:lM9LUSGl20E4lDZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f56479e35b3db1af2ebb48bce08f95d2a57063f3fe35589a3603b5914e04d26

Files

3f56479e35b3db1af2ebb48bce08f95d2a57063f3fe35589a3603b5914e04d26
.exe windows:5 windows x86 arch:x86

ac22b34d40676174a88e233de62b88c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qtcore4

??0QVariant@@QAE@ABV0@@Z
?node_create@QMapData@@QAEPAUNode@1@QAPAU21@HH@Z
??1QTranslator@@UAE@XZ
?installTranslator@QCoreApplication@@SAXPAVQTranslator@@@Z
?load@QTranslator@@QAE_NABVQString@@000@Z
??0QTranslator@@QAE@PAVQObject@@@Z
?setCodecForTr@QTextCodec@@SAXPAV1@@Z
?setCodecForLocale@QTextCodec@@SAXPAV1@@Z
?setCodecForCStrings@QTextCodec@@SAXPAV1@@Z
?codecForName@QTextCodec@@SAPAV1@PBD@Z
?width@QSize@@QBEHXZ
?height@QSize@@QBEHXZ
??0QRect@@QAE@HHHH@Z
?fromLocal8Bit@QString@@SA?AV1@PBDH@Z
?start@QAbstractAnimation@@QAEXW4DeletionPolicy@1@@Z
?setEndValue@QVariantAnimation@@QAEXABVQVariant@@@Z
?setStartValue@QVariantAnimation@@QAEXABVQVariant@@@Z
??0QVariant@@QAE@H@Z
?setDuration@QVariantAnimation@@QAEXH@Z
??0QPropertyAnimation@@QAE@PAVQObject@@ABVQByteArray@@0@Z
??0QByteArray@@QAE@PBD@Z
?metaObject@QPropertyAnimation@@UBEPBUQMetaObject@@XZ
?qt_metacast@QPropertyAnimation@@UAEPAXPBD@Z
?qt_metacall@QPropertyAnimation@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?event@QPropertyAnimation@@MAE_NPAVQEvent@@@Z
?duration@QVariantAnimation@@UBEHXZ
?updateCurrentTime@QVariantAnimation@@MAEXH@Z
?updateState@QPropertyAnimation@@MAEXW4State@QAbstractAnimation@@0@Z
?updateDirection@QAbstractAnimation@@MAEXW4Direction@1@@Z
?updateCurrentValue@QPropertyAnimation@@MAEXABVQVariant@@@Z
?interpolated@QVariantAnimation@@MBE?AVQVariant@@ABV2@0N@Z
??1QPropertyAnimation@@UAE@XZ
?errorString@QLibrary@@QBE?AVQString@@XZ
??1QLibrary@@UAE@XZ
?resolve@QLibrary@@QAEPAXPBD@Z
?load@QLibrary@@QAE_NXZ
??0QLibrary@@QAE@ABVQString@@PAVQObject@@@Z
?qt_metacast@QThread@@UAEPAXPBD@Z
?qt_metacall@QThread@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?staticMetaObject@QThread@@2UQMetaObject@@B
?qRegisterResourceData@@YA_NHPBE00@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
?free@QString@@CAXPAUData@1@@Z
?detach@QByteArray@@QAEXXZ
?qWinMain@@YAXPAUHINSTANCE__@@0PADHAAHAAV?$QVector@PAD@@@Z
?reallocate@QVectorData@@SAPAU1@PAU1@HHH@Z
?qMemSet@@YAPAXPAXHI@Z
?allocate@QVectorData@@SAPAU1@HH@Z
?qBadAlloc@@YAXXZ
?free@QVectorData@@SAXPAU1@H@Z
??6QDataStream@@QAEAAV0@H@Z
??6QDataStream@@QAEAAV0@_K@Z
??6QDataStream@@QAEAAV0@E@Z
?clear@QString@@QAEXXZ
?timerId@QTimerEvent@@QBEHXZ
?metaObject@QObject@@UBEPBUQMetaObject@@XZ
?startTimer@QObject@@QAEHH@Z
?write@QIODevice@@QAE_JPBD@Z
?windowsVersion@QSysInfo@@SA?AW4WinVersion@1@XZ
?allocateNode@QHashData@@QAEPAXH@Z
?detach_helper2@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?willGrow@QHashData@@QAE_NXZ
?shared_null@QHashData@@2U1@A
?fromBase64@QByteArray@@SA?AV1@ABV1@@Z
?resize@QByteArray@@QAEXH@Z
?readRawData@QDataStream@@QAEHPADH@Z
?qChecksum@@YAGPBDI@Z
??5QDataStream@@QAEAAV0@AA_K@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
??4QString@@QAEAAV0@ABVQByteArray@@@Z
??0QUrl@@QAE@ABVQString@@@Z
??1QUrl@@QAE@XZ
?remove@QSettings@@QAEXABVQString@@@Z
?contains@QSettings@@QBE_NABVQString@@@Z
?toInt@QVariant@@QBEHPA_N@Z
?arg@QString@@QBE?AV1@HHHABVQChar@@@Z
?isEmpty@QString@@QBE_NXZ
??0QVariant@@QAE@PBD@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?toString@QVariant@@QBE?AVQString@@XZ
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
?setIniCodec@QSettings@@QAEXPBD@Z
??0QVariant@@QAE@ABVQString@@@Z
?setValue@QSettings@@QAEXABVQString@@ABVQVariant@@@Z
??1QSettings@@UAE@XZ
??5QDataStream@@QAEAAV0@AAE@Z
??AQByteArray@@QAE?AVQByteRef@@H@Z
??BQByteRef@@QBE?BDXZ
??4QByteRef@@QAEAAV0@D@Z
??0QCryptographicHash@@QAE@W4Algorithm@0@@Z
?size@QFile@@UBE_JXZ
?addData@QCryptographicHash@@QAEXABVQByteArray@@@Z
?result@QCryptographicHash@@QBE?AVQByteArray@@XZ
??1QCryptographicHash@@QAE@XZ
?hash@QCryptographicHash@@SA?AVQByteArray@@ABV2@W4Algorithm@1@@Z
??0QFileInfo@@QAE@ABVQString@@@Z
?absolutePath@QFileInfo@@QBE?AVQString@@XZ
?exists@QDir@@QBE_NABVQString@@@Z
?mkpath@QDir@@QBE_NABVQString@@@Z
??0QFile@@QAE@ABVQString@@@Z
?toStdWString@QString@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?sprintf@QString@@QAAAAV1@PBDZZ
??0QChar@@QAE@UQLatin1Char@@@Z
?arg@QString@@QBE?AV1@ABV1@HABVQChar@@@Z
?fromWCharArray@QString@@SA?AV1@PBGH@Z
?createUuid@QUuid@@SA?AU1@XZ
?toString@QUuid@@QBE?AVQString@@XZ
?replace@QString@@QAEAAV1@ABV1@0W4CaseSensitivity@Qt@@@Z
?fromHex@QByteArray@@SA?AV1@ABV1@@Z
??0QSize@@QAE@HH@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?fromUtf8@QString@@SA?AV1@PBDH@Z
?toUtf8@QString@@QBE?AVQByteArray@@XZ
??0QByteArray@@QAE@PBDH@Z
?append@QByteArray@@QAEAAV1@D@Z
?data@QByteArray@@QBEPBDXZ
?append@QByteArray@@QAEAAV1@PBDH@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QObject@@UAEPAXPBD@Z
?qDebug@@YAXPBDZZ
?reset@QIODevice@@UAE_NXZ
?seek@QIODevice@@UAE_N_J@Z
?size@QIODevice@@UBE_JXZ
?pos@QIODevice@@UBE_JXZ
?open@QIODevice@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QObject@@QAE@PAV0@@Z
?clear@QByteArray@@QAEXXZ
??1QObject@@UAE@XZ
??MQString@@QBE_NABV0@@Z
?qCompress@@YA?AVQByteArray@@PBEHH@Z
?length@QString@@QBEHXZ
?append@QByteArray@@QAEAAV1@ABV1@@Z
??0QDataStream@@QAE@PAVQByteArray@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??6QDataStream@@QAEAAV0@C@Z
??6QDataStream@@QAEAAV0@F@Z
?mid@QString@@QBE?AV1@HH@Z
?toAscii@QString@@QBE?AVQByteArray@@XZ
?qDebug@@YA?AVQDebug@@XZ
??6QDebug@@QAEAAV0@ABVQString@@@Z
??1QDebug@@QAE@XZ
??6@YAAAVQDataStream@@AAV0@ABVQByteArray@@@Z
??6QDataStream@@QAEAAV0@I@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?write@QIODevice@@QAE_JABVQByteArray@@@Z
?close@QFile@@UAEXXZ
?count@QByteArray@@QBEHXZ
?data@QByteArray@@QAEPADXZ
??0QDir@@QAE@ABVQString@@@Z
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
??0QFileInfo@@QAE@ABVQDir@@ABVQString@@@Z
??1QDir@@QAE@XZ
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
??1QFileInfo@@QAE@XZ
?cd@QDir@@QAE_NABVQString@@@Z
?absolutePath@QDir@@QBE?AVQString@@XZ
?node_delete@QMapData@@QAEXQAPAUNode@1@HPAU21@@Z
?detach@QListData@@QAEPAUData@1@H@Z
??0QByteArray@@QAE@ABV0@@Z
?createData@QMapData@@SAPAU1@H@Z
?begin@QListData@@QBEPAPAXXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?qFree@@YAXPAX@Z
?end@QListData@@QBEPAPAXXZ
?status@QDataStream@@QBE?AW4Status@1@XZ
?resetStatus@QDataStream@@QAEXXZ
??5QDataStream@@QAEAAV0@AAI@Z
??0QVariant@@QAE@XZ
??5@YAAAVQDataStream@@AAV0@AAVQVariant@@@Z
??1QVariant@@QAE@XZ
?setStatus@QDataStream@@QAEXW4Status@1@@Z
?continueFreeData@QMapData@@QAEXH@Z
??9QBasicAtomicInt@@QBE_NH@Z
?append@QListData@@QAEPAPAXXZ
?at@QListData@@QBEPAPAXH@Z
?deref@QBasicAtomicInt@@QAE_NXZ
?shared_null@QMapData@@2U1@A
?size@QListData@@QBEHXZ
?shared_null@QListData@@2UData@1@A
?ref@QBasicAtomicInt@@QAE_NXZ
?exists@QFile@@SA_NABVQString@@@Z
??4QByteArray@@QAEAAV0@ABV0@@Z
?size@QByteArray@@QBEHXZ
?constData@QByteArray@@QBEPBDXZ
?qUncompress@@YA?AVQByteArray@@PBEH@Z
?setByteOrder@QDataStream@@QAEXW4ByteOrder@1@@Z
??5QDataStream@@QAEAAV0@AAH@Z
??5@YAAAVQDataStream@@AAV0@AAVQString@@@Z
??5@YAAAVQDataStream@@AAV0@AAVQByteArray@@@Z
??5QDataStream@@QAEAAV0@AAC@Z
?toHex@QByteArray@@QBE?AV1@XZ
??0QString@@QAE@ABVQByteArray@@@Z
??0QString@@QAE@XZ
??0QEventLoop@@QAE@PAVQObject@@@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
??4QString@@QAEAAV0@ABV0@@Z
??4QString@@QAEAAV0@PBD@Z
?exec@QEventLoop@@QAEHV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
?cdUp@QDir@@QAE_NXZ
?isOpen@QIODevice@@QBE_NXZ
?read@QIODevice@@QAE?AVQByteArray@@_J@Z
??1QThread@@UAE@XZ
?length@QByteArray@@QBEHXZ
??0QMutexLocker@@QAE@PAVQMutex@@@Z
?setFileName@QFile@@QAEXABVQString@@@Z
??1QMutexLocker@@QAE@XZ
??0QDataStream@@QAE@ABVQByteArray@@@Z
??1QDataStream@@UAE@XZ
??1QEventLoop@@UAE@XZ
?fromAscii@QString@@SA?AV1@PBDH@Z
??0QString@@QAE@ABV0@@Z
??YQString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@PBD@Z
??1QString@@QAE@XZ
??0QByteArray@@QAE@XZ
??1QByteArray@@QAE@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?startDetached@QProcess@@SA_NABVQString@@ABVQStringList@@0PA_J@Z
?wait@QThread@@QAE_NK@Z
?start@QThread@@QAEXW4Priority@1@@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
??0QThread@@QAE@PAVQObject@@@Z
??1QMutex@@QAE@XZ
??1QFile@@UAE@XZ
??0QMutex@@QAE@W4RecursionMode@0@@Z
??0QFile@@QAE@XZ
?device@QDataStream@@QBEPAVQIODevice@@XZ
?toLower@QString@@QBE?AV1@XZ
??BQByteArray@@QBEPBDXZ
??5QDataStream@@QAEAAV0@AAG@Z
??0QDataStream@@QAE@PAVQIODevice@@@Z

qtgui4

?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?storageLocation@QDesktopServices@@SA?AVQString@@W4StandardLocation@1@@Z
??1QFont@@QAE@XZ
?exec@QApplication@@SAHXZ
?show@QWidget@@QAEXXZ
?setFont@QApplication@@SAXABVQFont@@PBD@Z
?setFamily@QFont@@QAEXABVQString@@@Z
?setPointSize@QFont@@QAEXH@Z
?font@QApplication@@SA?AVQFont@@XZ
??1QApplication@@UAE@XZ
??0QApplication@@QAE@AAHPAPADH@Z
??1QPixmap@@UAE@XZ
??1QWidget@@UAE@XZ
?loadFromData@QPixmap@@QAE_NABVQByteArray@@PBDV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?setFixedSize@QWidget@@QAEXHH@Z
?move@QWidget@@QAEXHH@Z
?staticMetaObject@QWidget@@2UQMetaObject@@B
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?update@QWidget@@QAEXXZ
?close@QWidget@@QAE_NXZ
?information@QMessageBox@@SA?AW4StandardButton@1@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z
?question@QMessageBox@@SA?AW4StandardButton@1@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z
??0QPainter@@QAE@PAVQPaintDevice@@@Z
?setRenderHint@QPainter@@QAEXW4RenderHint@1@_N@Z
?isNull@QPixmap@@QBE_NXZ
??0QColor@@QAE@HHHH@Z
?fillRect@QPainter@@QAEXHHHHABVQColor@@@Z
??0QFont@@QAE@XZ
?setPixelSize@QFont@@QAEXH@Z
?setFont@QPainter@@QAEXABVQFont@@@Z
?setPen@QPainter@@QAEXABVQColor@@@Z
?drawText@QPainter@@QAEXABVQRect@@HABVQString@@PAV2@@Z
?drawPixmap@QPainter@@QAEXHHABVQPixmap@@@Z
?height@QPixmap@@QBEHXZ
?width@QPixmap@@QBEHXZ
?font@QPainter@@QBEABVQFont@@XZ
??0QFontMetrics@@QAE@ABVQFont@@@Z
?height@QFontMetrics@@QBEHXZ
?ascent@QFontMetrics@@QBEHXZ
?width@QFontMetrics@@QBEHABVQString@@H@Z
?descent@QFontMetrics@@QBEHXZ
?drawText@QPainter@@QAEXHHABVQString@@@Z
??1QFontMetrics@@QAE@XZ
??1QPainter@@QAE@XZ
??1QGraphicsDropShadowEffect@@UAE@XZ
?sourceChanged@QGraphicsEffect@@MAEXV?$QFlags@W4ChangeFlag@QGraphicsEffect@@@@@Z
?draw@QGraphicsDropShadowEffect@@MAEXPAVQPainter@@@Z
?boundingRectFor@QGraphicsDropShadowEffect@@UBE?AVQRectF@@ABV2@@Z
?qt_metacall@QGraphicsDropShadowEffect@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QGraphicsDropShadowEffect@@UAEPAXPBD@Z
?metaObject@QGraphicsDropShadowEffect@@UBEPBUQMetaObject@@XZ
??0QGraphicsDropShadowEffect@@QAE@PAVQObject@@@Z
?setOffset@QGraphicsDropShadowEffect@@QAEXNN@Z
??0QColor@@QAE@W4GlobalColor@Qt@@@Z
?setColor@QGraphicsDropShadowEffect@@QAEXABVQColor@@@Z
?setBlurRadius@QGraphicsDropShadowEffect@@QAEXN@Z
?setGraphicsEffect@QWidget@@QAEXPAVQGraphicsEffect@@@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?releaseDC@QWidget@@UBEXPAUHDC__@@@Z
?getDC@QWidget@@UBEPAUHDC__@@XZ
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?devType@QWidget@@UBEHXZ
?languageChange@QWidget@@MAEXXZ
?windowActivationChange@QWidget@@MAEX_N@Z
?fontChange@QWidget@@MAEXABVQFont@@@Z
?paletteChange@QWidget@@MAEXABVQPalette@@@Z
?enabledChange@QWidget@@MAEX_N@Z
?styleChange@QWidget@@MAEXAAVQStyle@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?winEvent@QWidget@@MAE_NPAUtagMSG@@PAJ@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?setAttribute@QWidget@@QAEXW4WidgetAttribute@Qt@@_N@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?heightForWidth@QWidget@@UBEHH@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?setVisible@QWidget@@UAEX_N@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
??0QPixmap@@QAE@XZ
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?setWindowFlags@QWidget@@QAEXV?$QFlags@W4WindowType@Qt@@@@@Z

qtnetwork4

?readData@QAbstractSocket@@MAE_JPAD_J@Z
??1QTcpSocket@@UAE@XZ
?waitForConnected@QAbstractSocket@@QAE_NH@Z
?connectToHost@QAbstractSocket@@QAEXABVQString@@GV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QTcpSocket@@QAE@PAVQObject@@@Z
?localHostName@QHostInfo@@SA?AVQString@@XZ
??0QNetworkProxy@@QAE@W4ProxyType@0@ABVQString@@G11@Z
??1QNetworkProxy@@QAE@XZ
?setApplicationProxy@QNetworkProxy@@SAXABV1@@Z
?connectToServer@QLocalSocket@@QAEXABVQString@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QLocalSocket@@QAE@PAVQObject@@@Z
?removeServer@QLocalServer@@SA_NABVQString@@@Z
?close@QLocalServer@@QAEXXZ
?isListening@QLocalServer@@QBE_NXZ
?disconnectFromServer@QLocalSocket@@QAEXXZ
?abort@QAbstractSocket@@QAEXXZ
?metaObject@QTcpSocket@@UBEPBUQMetaObject@@XZ
?qt_metacast@QTcpSocket@@UAEPAXPBD@Z
?qt_metacall@QTcpSocket@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?isSequential@QAbstractSocket@@UBE_NXZ
?close@QAbstractSocket@@UAEXXZ
?atEnd@QAbstractSocket@@UBE_NXZ
?bytesAvailable@QAbstractSocket@@UBE_JXZ
?bytesToWrite@QAbstractSocket@@UBE_JXZ
?canReadLine@QAbstractSocket@@UBE_NXZ
?waitForReadyRead@QAbstractSocket@@UAE_NH@Z
?waitForBytesWritten@QAbstractSocket@@UAE_NH@Z
?waitForConnected@QLocalSocket@@QAE_NH@Z
?readLineData@QAbstractSocket@@MAE_JPAD_J@Z
?writeData@QAbstractSocket@@MAE_JPBD_J@Z
?disconnectFromHost@QAbstractSocket@@QAEXXZ
?flush@QAbstractSocket@@QAE_NXZ
??1QHostAddress@@QAE@XZ
?toIPv4Address@QHostAddress@@QBEIXZ
??0QHostAddress@@QAE@ABVQString@@@Z
?toString@QHostAddress@@QBE?AVQString@@XZ
??0QHostAddress@@QAE@I@Z
??0QNetworkProxy@@QAE@ABV0@@Z
?setPassword@QNetworkProxy@@QAEXABVQString@@@Z
?setUser@QNetworkProxy@@QAEXABVQString@@@Z
?setPort@QNetworkProxy@@QAEXG@Z
?setHostName@QNetworkProxy@@QAEXABVQString@@@Z
??4QNetworkProxy@@QAEAAV0@ABV0@@Z
??1QNetworkProxyQuery@@QAE@XZ
?systemProxyForQuery@QNetworkProxyFactory@@SA?AV?$QList@VQNetworkProxy@@@@ABVQNetworkProxyQuery@@@Z
??0QNetworkProxyQuery@@QAE@ABVQUrl@@W4QueryType@0@@Z
??0QNetworkProxyQuery@@QAE@XZ
?setType@QNetworkProxy@@QAEXW4ProxyType@1@@Z
??0QNetworkProxy@@QAE@XZ
??1QLocalServer@@UAE@XZ
??0QLocalServer@@QAE@PAVQObject@@@Z
?listen@QLocalServer@@QAE_NABVQString@@@Z
??1QLocalSocket@@UAE@XZ

msvcp90

?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
__p__fmode
_except_handler4_common
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memset
rand
strcmp
??2@YAPAXI@Z
memcpy
_CxxThrowException
memcmp
_purecall
??3@YAXPAX@Z
__CxxFrameHandler3
_invoke_watson
_controlfp_s
__p__commode

wininet

InternetGetConnectedState

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

user32

GetSystemMetrics

kernel32

GetCommandLineW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLogicalDrives
GetDriveTypeW
GetCurrentProcess
CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

advapi32

OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

��&��>O�3�� %1�A�6��~7X��X;va�p5H��4�S�T��SS ~�پ��]�Z��ň��sGJ��@3&�)Wt�젻�h�[[ #�4��x o��4�ʇ_��O��G��"y��`��Y�M�w�r�Js tgw>��:�QP�x��bi��U�W��O0R`PK�.��:�x��yR��T�>H0��3�Z�m��_��۷�sx<h��P��V� �*<��.=*��E�r��튽;�߈�|�r��XBg8�=ёqHB)��p&>4z��C�3|'t�� 6��LmXg��ي�.�A��Pg��7��^��(v��d��a�o\��6(s�'L��,<��ݕ(:J~}L ��ca�nMpС�y]��2k�Ezֳ�`#��Օ��FG�o8T��?�� 0 �r�*��2Ǹ؉@P!��=�@�Ҥk �m'�G�� 3�e�J�a��F�23�Ϛ7��W��"�%�ǭ�{ �Q�me�Кh-�"��'o6��v��V�0S�=@B��3��zKa�0?^xd�9�_u��l�[��n�8� V�F$��*Ҥ��dDL�\�x�2��*��*��\�J~�H�p�r��#��<��^G��Yv��{�C#��g>Ȇ�x�s ��pԱ�g�@��-◐\��?Ļ�,��{gFn��d��4��iv) Lu��w�(�x�x ��6P��)��ov�5#.�$�<�9/`>�L��c��`�&��, 0��Z ��]�P.��""��C��-,u��N��T�&��'�_/��W>eX�=�d7e��B� ��r$r��A��}Z�X H��^[܈+�ڦ�K��_�!��5̦��I��X��uد�c�:�TR�M{d��OU4��U#��1v%��"�<yy��p\�x b�=�S�+�v��[�Ϛ�3O��P| �d�.�b�Ñ�m�Ս�rm۷�_2-%�&{j�:��\Eq�pJ��}��1��0�f��.KL��HeP~s˺�j��a�mr�=�a��&� ��,�.�m��@b�@!��$��>F�1;��AjU��}ڴs��^� x|�Y��[��E�E�G:��t��W_�!��8�z�b�W�z�\��|�X��%�@ �N�o�Y{��t�T��'$��Ͳ�1�1��@n�:��) ��&��Ugi'z=�n_-ۭqw�mh�w��zӟH'��o&�3>A�2m��c�]<��'�.�!�ss�7��h{�R��ՄJ�W�r@�E�&_`�[/~�w#�]��M�Y>�a��ai��la��nn��N�.�d��{��pż��H��朘POӐ��ǖ�qX�]fL��-RIe�X��US��(e��w��錍��*�ISPO��/�;�ם�E�ƫDj��|[V��Ά��R�Ⱥ`��D�I��d�[��s�n)�6��j�?~Qĳ~�mKJ� �+3��8[�yviE��)6�@,(��ʰ�G�6i��Z}�N�� % �V�Y6F=?�Ӏ�ȕ`��>D]�p%:n�<͂�j=>s�a�+q�{�v("�f�+e��7Dp�� X{�4y��b� ��j�}?r`�L�)> 3�֚+�f&M^�Ox��Xm�L�ӽ�!q��i��h��]OXu徜�S_@�U�L��p��_*�"��Up(r}d��k�l_6�?�w`v�/kdP��6#Z��+X��;�c�o��Ƴ�p��#�1֎%�*(A6;��ise��;�/ſ�De,f��kw�(F��;�+��gc��ݳ��B��);܊��m��)��ܡ�B��|shcUj ��!��g�Uu!�?��|�U�'ѫ��i\�H��T ��#��AN"�k,��گ�J �}"۔��;��8I��m�� 6C��O<tv^؆%��+��2�FPO�4w@%Ĭ|�$��jP\�� t��Iص�z!�w��8�w(4�u ��%��A�(琅I��h��y��t�� uY8�XY4�]�M:Y�.^48��-Z~�n�J�ۘ��v�벘�T� ��ڀ� ��|<��ׂH_E��,�F�l��G��S�.gH��2�lvV�8�i} Q��L�p.�1vtBHd"�� gv�w��9!��ꐹ%{n.�@m�gُ-ȱ`g��cй� �C��J��(9kۻÄ�W<�%�}�� $τi츹�21�g��M�h�'��JCG{D��8ch"8��CؠB��f�. o�Q��`pFK��e�sX~��Ŀ?l�&� �G��n��qf1��C4��@^�vHjk� y�.�ї�Z報��?4)/jY�%��z�N�$�8q�;s��lqއ�=��ƶ�rs�ù�D0x)Ěٚ��M�t� �4H�\��X��FG�c9�Sl�1"��Y��j�Cӧ��F��e�p��DCmD��Y�\}�#g}��^q�1��}�f��c_�4��B�[ �0�-�F�m(�o&Z�7${�(G?D�a�=��3��>�]n��nb,*�Q�]��n�AgC�PG��w�Sy��2��"�x%�Rﬃ�Y�K��=��p�� w8�-��L�@�\�·�&��)����&��@��zpp�V��!7��v��'.ؙ��R2�L]#�� eQ+SI'{�tj��' {��e�V�� Dq�POE��@&��aQ��g�gW�?�x�L�3�W�M<#c.Œc��g�&�W�Ն��p��8�Y/fMD��"&`B��ͅ�ȳ��)��H��pK��Q׉i��8��#�d?<PQ��l�4�#�� Tb��&

Sections

.text
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wolf0
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wolf1
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac22b34d40676174a88e233de62b88c7

Headers

DLL Characteristics

File Characteristics

Imports

qtcore4

qtgui4

qtnetwork4

msvcp90

msvcr90

wininet

version

user32

kernel32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 91KB

.rdata Size: - Virtual size: 159KB

.data Size: - Virtual size: 2KB

.wolf0 Size: - Virtual size: 13KB

.tls Size: 512B - Virtual size: 24B

.wolf1 Size: 194KB - Virtual size: 194KB

.reloc Size: 512B - Virtual size: 316B

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: - Virtual size: 91KB

.rdata
Size: - Virtual size: 159KB

.data
Size: - Virtual size: 2KB

.wolf0
Size: - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 24B

.wolf1
Size: 194KB - Virtual size: 194KB

.reloc
Size: 512B - Virtual size: 316B

.rsrc
Size: 16KB - Virtual size: 16KB