013fed3aafdf1e69c800ffb611b25c64_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

013fed3aafdf1e69c800ffb611b25c64_JaffaCakes118
Size

598KB
MD5

013fed3aafdf1e69c800ffb611b25c64
SHA1

543be1b76909fe9f5dad4279a5c1a1d8efa96f75
SHA256

b2bbca8d90701efbc4eac3ce809ca4256bb6a45da7d35b6d3220bcee87751b49
SHA512

44d5d499969e7c70c7606a57627e2539ad54a42ba841f983e042f82995643f722790477b5661f377eefc75065bb02974fff7e6e71166cae278b526ab95bf0661
SSDEEP

12288:VSy24Gf89GvR7pdvqHEHZ3l0Pbhc976bVOb90G37:VV9GvRjvqu4DhaWbV090y7

Score

1^/10

Malware Config

Signatures

Files

013fed3aafdf1e69c800ffb611b25c64_JaffaCakes118
.exe windows:5 windows x86 arch:x86

465d5960baf3b84b8eb0c70eb29cde9f

Code Sign

60:bc:17:a0:63:d1:09:a9:0e:f3:61:6b:5f:10:53:3d
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA,O=WoSign CA Limited,C=CN

Not Before

06/04/2016, 03:19

Not After

06/01/2018, 03:19

Subject

CN=合一网络技术（北京）有限公司,O=合一网络技术（北京）有限公司,L=北京市,ST=北京市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

46:bb:b3:40:fa:b9:c1:79:28:93:8c:93:da:10:86:79
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Class 3 Code Signing CA,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:6f:04:d2:13:44:d0:37:09:e8:c1:9c:c7:ed:12:b5
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

06/04/2016, 03:28

Not After

06/01/2018, 03:28

Subject

CN=合一网络技术（北京）有限公司,O=合一网络技术（北京）有限公司,L=北京市,ST=北京市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:f9:c1:b5:36:59:c0:cf:a4:5f:b0:77:7c:17:a9:85:df:16:f2:0e:5b:a1:3e:04:7d:29:0b:20:ed:20:79:04
Signer

Actual PE Digest

5f:f9:c1:b5:36:59:c0:cf:a4:5f:b0:77:7c:17:a9:85:df:16:f2:0e:5b:a1:3e:04:7d:29:0b:20:ed:20:79:04

Digest Algorithm

sha256

PE Digest Matches

true

88:a2:5c:46:7e:ab:59:36:e4:4a:7d:60:e5:97:5d:d3:aa:22:21:71
Signer

Actual PE Digest

88:a2:5c:46:7e:ab:59:36:e4:4a:7d:60:e5:97:5d:d3:aa:22:21:71

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qt5core

?setObjectName@QObject@@QAEXABVQString@@@Z
?objectName@QObject@@QBE?AVQString@@XZ
?killTimer@QObject@@QAEXH@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
?quit@QCoreApplication@@SAXXZ
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??1QString@@QAE@XZ
??0QString@@QAE@XZ
??1Connection@QMetaObject@@QAE@XZ
?startTimer@QObject@@QAEHHW4TimerType@Qt@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
??1QByteArray@@QAE@XZ
?remove@QByteArray@@QAEAAV1@HH@Z
??BQByteRef@@QBEDXZ
?append@QString@@QAEAAV1@ABV1@@Z
?fromUtf8@QString@@SA?AV1@ABVQByteArray@@@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?close@QFileDevice@@UAEXXZ
??0QFile@@QAE@ABVQString@@@Z
??1QFile@@UAE@XZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?qRegisterResourceData@@YA_NHPBE00@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z

qt5gui

??1QPixmap@@UAE@XZ
??1QCursor@@QAE@XZ
??0QPainter@@QAE@PAVQPaintDevice@@@Z
??1QPainter@@QAE@XZ
??0QPixmap@@QAE@ABVQString@@PBDV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?drawPixmap@QPainter@@QAEXABVQRectF@@ABVQPixmap@@0@Z
??0QMovie@@QAE@PAVQObject@@@Z
??1QMovie@@UAE@XZ
?setFileName@QMovie@@QAEXABVQString@@@Z
?start@QMovie@@QAEXXZ
?devType@QPixmap@@UBEHXZ
?initPainter@QPaintDevice@@MBEXPAVQPainter@@@Z
?metaObject@QMovie@@UBEPBUQMetaObject@@XZ
?metric@QPixmap@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?paintEngine@QPixmap@@UBEPAVQPaintEngine@@XZ
?qt_metacall@QMovie@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QMovie@@UAEPAXPBD@Z
?redirected@QPaintDevice@@MBEPAV1@PAVQPoint@@@Z
?sharedPainter@QPaintDevice@@MBEPAVQPainter@@XZ
??0QCursor@@QAE@W4CursorShape@Qt@@@Z

qt5widgets

?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?minimumSizeHint@QPushButton@@UBE?AVQSize@@XZ
?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?metaObject@QWidget@@UBEPBUQMetaObject@@XZ
?metaObject@QPushButton@@UBEPBUQMetaObject@@XZ
?metaObject@QLabel@@UBEPBUQMetaObject@@XZ
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyReleaseEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QPushButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QLabel@@MAEXPAVQKeyEvent@@@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?initPainter@QWidget@@MBEXPAVQPainter@@@Z
?hitButton@QAbstractButton@@MBE_NABVQPoint@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?heightForWidth@QWidget@@UBEHH@Z
?heightForWidth@QLabel@@UBEHH@Z
?hasHeightForWidth@QWidget@@UBE_NXZ
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?focusNextPrevChild@QLabel@@MAE_N_N@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?event@QPushButton@@MAE_NPAVQEvent@@@Z
?event@QLabel@@MAE_NPAVQEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?devType@QWidget@@UBEHXZ
?createPopupMenu@QMainWindow@@UAEPAVQMenu@@XZ
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QMainWindow@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?mouseReleaseEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?changeEvent@QLabel@@MAEXPAVQEvent@@@Z
?changeEvent@QAbstractButton@@MAEXPAVQEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
??1QPushButton@@UAE@XZ
??0QPushButton@@QAE@PAVQWidget@@@Z
?clicked@QAbstractButton@@QAEX_N@Z
?setText@QAbstractButton@@QAEXABVQString@@@Z
?setMovie@QLabel@@QAEXPAVQMovie@@@Z
?setText@QLabel@@QAEXABVQString@@@Z
??1QLabel@@UAE@XZ
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?setCentralWidget@QMainWindow@@QAEXPAVQWidget@@@Z
??1QMainWindow@@UAE@XZ
??0QMainWindow@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
?setAttribute@QWidget@@QAEXW4WidgetAttribute@Qt@@_N@Z
?setWindowFlags@QWidget@@QAEXV?$QFlags@W4WindowType@Qt@@@@@Z
?setGeometry@QWidget@@QAEXABVQRect@@@Z
?resize@QWidget@@QAEXABVQSize@@@Z
?raise@QWidget@@QAEXXZ
?close@QWidget@@QAE_NXZ
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?setCursor@QWidget@@QAEXABVQCursor@@@Z
?setFixedHeight@QWidget@@QAEXH@Z
?setFixedWidth@QWidget@@QAEXH@Z
?rect@QWidget@@QBE?AVQRect@@XZ
?winId@QWidget@@QBEIXZ
??1QWidget@@UAE@XZ
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?nativeEvent@QWidget@@MAE_NABVQByteArray@@PAXPAJ@Z
?nextCheckState@QAbstractButton@@MAEXXZ
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?paintEvent@QLabel@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QPushButton@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?qt_metacall@QLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QPushButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QLabel@@UAEPAXPBD@Z
?qt_metacast@QPushButton@@UAEPAXPBD@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?redirected@QWidget@@MBEPAVQPaintDevice@@PAVQPoint@@@Z
?staticMetaObject@QMainWindow@@2UQMetaObject@@B
?qt_metacall@QMainWindow@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QMainWindow@@UAEPAXPBD@Z
?screenGeometry@QDesktopWidget@@QBE?BVQRect@@H@Z
?setStyleSheet@QApplication@@QAEXABVQString@@@Z
?exec@QApplication@@SAHXZ
?desktop@QApplication@@SAPAVQDesktopWidget@@XZ
??1QApplication@@UAE@XZ
??0QApplication@@QAE@AAHPAPADH@Z
?move@QWidget@@QAEXABVQPoint@@@Z
?show@QWidget@@QAEXXZ
?staticMetaObject@QAbstractButton@@2UQMetaObject@@B
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?timerEvent@QAbstractButton@@MAEXPAVQTimerEvent@@@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?setVisible@QWidget@@UAEX_N@Z
?sharedPainter@QWidget@@MBEPAVQPainter@@XZ
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?sizeHint@QPushButton@@UBE?AVQSize@@XZ
?sizeHint@QLabel@@UBE?AVQSize@@XZ
?checkStateSet@QAbstractButton@@MAEXXZ

kernel32

SetEndOfFile
RemoveDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FormatMessageA
CreateWaitableTimerA
ResumeThread
DeleteFileW
SetFilePointerEx
LocalFree
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
SetWaitableTimer
TlsSetValue
WaitForMultipleObjects
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
QueueUserAPC
GetQueuedCompletionStatus
CreateIoCompletionPort
SetLastError
TerminateThread
InterlockedCompareExchange
DuplicateHandle
ReleaseSemaphore
CreateSemaphoreA
GetSystemTimeAsFileTime
OutputDebugStringA
SystemTimeToFileTime
GetSystemTime
SetFilePointer
WriteFile
GetFileSize
GlobalFree
GlobalAlloc
VerifyVersionInfoW
GetModuleHandleA
VerSetConditionMask
SetConsoleOutputCP
SetConsoleTitleW
FreeConsole
SetConsoleCtrlHandler
GetACP
SetInformationJobObject
AssignProcessToJobObject
CreateJobObjectW
QueryPerformanceCounter
MoveFileExW
CopyFileW
FindNextFileW
FindFirstFileW
FindFirstFileA
CreateFileW
GetDiskFreeSpaceExW
GetTempPathW
GetSystemDirectoryW
GetDriveTypeW
FindResourceW
OutputDebugStringW
CreateProcessW
GetModuleHandleW
GetModuleFileNameW
GetTickCount
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
DeviceIoControl
SizeofResource
LoadResource
Sleep
GetCurrentThreadId
LockResource
FreeResource
WideCharToMultiByte
MultiByteToWideChar
TlsGetValue
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
GetCurrentProcessId
WaitForSingleObject
OpenEventA
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LoadLibraryW
TlsFree
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
PostQueuedCompletionStatus
GetLastError
GetCurrentProcess
GetProcAddress
FreeLibrary
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
SetEvent
CloseHandle
CreateEventA
AreFileApisANSI
EncodePointer
DecodePointer
IsDebuggerPresent
GetLogicalDrives
IsProcessorFeaturePresent
lstrlenA
GetCommandLineW
AllocConsole

user32

wsprintfW
PostMessageW
ExitWindowsEx
SetWindowPos

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
SetNamedSecurityInfoA
CheckTokenMembership
CreateWellKnownSid
GetTokenInformation
RegSetValueExW

shell32

CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
ord680
SHGetFolderPathW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

oleaut32

VariantClear
SysFreeString
SysAllocString

msvcp120

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Nan
_Inf
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?flags@ios_base@std@@QAEHH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
_Getcvt
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?classic@locale@std@@SAABV12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Xout_of_range@std@@YAXPBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??0id@locale@std@@QAE@I@Z
??Bios_base@std@@QBE_NXZ
?exceptions@ios_base@std@@QAEXH@Z
?flags@ios_base@std@@QBEHXZ
?unsetf@ios_base@std@@QAEXH@Z
?precision@ios_base@std@@QAE_J_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??_7codecvt_base@std@@6B@
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??_7?$codecvt@_WDH@std@@6B@
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ

ws2_32

WSACleanup
WSAStartup

msvcr120

??2@YAPAXI@Z
??3@YAXPAX@Z
memchr
memmove
??_V@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
localeconv
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
isdigit
isspace
tolower
sprintf_s
??0exception@std@@QAE@XZ
??8type_info@@QBE_NABV0@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
_localtime64
_wcsnicmp
_time64
memcpy_s
fclose
fflush
fgetc
fgetpos
fputc
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
sprintf
_lock_file
_unlock_file
memcmp
strlen
wcslen
isalnum
__iob_func
fread
freopen
fseek
printf
sscanf
vsprintf_s
swprintf_s
_vswprintf_c_l
_wfopen_s
_wremove
strcmp
strncpy
strrchr
strstr
wcscmp
wcscpy_s
_wcsicmp
abs
atof
atoi
_strtoui64
rand
srand
free
malloc
_wchdir
_wmkdir
_wrmdir
_waccess
_wrename
_wfindfirst64i32
_wfindnext64i32
toupper
_findclose
wcscat
wcscpy
_itow_s
_wtoi
_wtoi64
_gmtime64
_beginthreadex
strerror
_stricmp
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except1
_vsnprintf
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_strdup
_purecall

iphlpapi

GetAdaptersInfo

wininet

InternetCloseHandle
InternetOpenW
InternetTimeToSystemTimeA
InternetConnectW
InternetSetCookieA
HttpQueryInfoW
InternetReadFile
InternetSetFilePointer
InternetSetOptionW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoA
InternetTimeFromSystemTimeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

465d5960baf3b84b8eb0c70eb29cde9f

Code Sign

60:bc:17:a0:63:d1:09:a9:0e:f3:61:6b:5f:10:53:3dCertificate

Extended Key Usages

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91Certificate

Key Usages

46:bb:b3:40:fa:b9:c1:79:28:93:8c:93:da:10:86:79Certificate

Extended Key Usages

Key Usages

1f:6f:04:d2:13:44:d0:37:09:e8:c1:9c:c7:ed:12:b5Certificate

Extended Key Usages

Key Usages

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54Certificate

Extended Key Usages

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91Certificate

Key Usages

5f:f9:c1:b5:36:59:c0:cf:a4:5f:b0:77:7c:17:a9:85:df:16:f2:0e:5b:a1:3e:04:7d:29:0b:20:ed:20:79:04Signer

88:a2:5c:46:7e:ab:59:36:e4:4a:7d:60:e5:97:5d:d3:aa:22:21:71Signer

Headers

DLL Characteristics

File Characteristics

Imports

qt5core

qt5gui

qt5widgets

kernel32

user32

advapi32

shell32

ole32

oleaut32

msvcp120

ws2_32

msvcr120

iphlpapi

wininet

version

Sections

.text Size: 415KB - Virtual size: 414KB

.rdata Size: 105KB - Virtual size: 104KB

.data Size: 38KB - Virtual size: 40KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 24KB - Virtual size: 24KB

60:bc:17:a0:63:d1:09:a9:0e:f3:61:6b:5f:10:53:3d
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

46:bb:b3:40:fa:b9:c1:79:28:93:8c:93:da:10:86:79
Certificate

1f:6f:04:d2:13:44:d0:37:09:e8:c1:9c:c7:ed:12:b5
Certificate

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

5f:f9:c1:b5:36:59:c0:cf:a4:5f:b0:77:7c:17:a9:85:df:16:f2:0e:5b:a1:3e:04:7d:29:0b:20:ed:20:79:04
Signer

88:a2:5c:46:7e:ab:59:36:e4:4a:7d:60:e5:97:5d:d3:aa:22:21:71
Signer

.text
Size: 415KB - Virtual size: 414KB

.rdata
Size: 105KB - Virtual size: 104KB

.data
Size: 38KB - Virtual size: 40KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 24KB - Virtual size: 24KB