quazip[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

quazip.dll
Size

174KB
MD5

f9612bdac5eb34189039b53e66165135
SHA1

c6a6b039ec147b0a3859cd2df8138ed93001dc7d
SHA256

446ed7c1399733f6e021213c22ff299b2dd2ba1c33a123c978b41c6893a75770
SHA512

4d9752ada12a84f74fc48fd9d80892290cd4895927aac2788a66e4f99ccafb4f5e1401ebd9babe706b41d7b227a427ec8f8c9510214e9a342e6d9b093db605b7
SSDEEP

3072:+G+eODGbjc5SLiel60ptaIDNOcZJiAFNfuXWUI9JMvwly:Pc36OcZJiAzwWFMvwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quazip.dll

Files

quazip.dll
.dll windows:4 windows x86 arch:x86

02524a9970e90c3c5caafd78d8f70534

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

qt5core

_Z5qHashRK7QStringj
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray6expandEi
_ZN10QByteArray6resizeEi
_ZN10QByteArrayC1EPKci
_ZN10QByteArrayC1Eic
_ZN10QByteArrayaSERKS_
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN10QTextCodec14codecForLocaleEv
_ZN11QFileDevice5closeEv
_ZN11QMetaObject10ConnectionD1Ev
_ZN4QDir5matchERK11QStringListRK7QString
_ZN4QDir9cleanPathERK7QString
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN5QDateC1Eiii
_ZN5QFile11setFileNameERK7QString
_ZN5QFile14setPermissionsE6QFlagsIN11QFileDevice10PermissionEE
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile6removeERK7QString
_ZN5QFileC1ERK7QString
_ZN5QFileC1Ev
_ZN5QFileD1Ev
_ZN5QTimeC1Eiiii
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString20fromLocal8Bit_helperEPKci
_ZN7QString4chopEi
_ZN7QString6appendERKS_
_ZN7QStringaSERKS_
_ZN9QDateTime15currentDateTimeEv
_ZN9QDateTimeC1ERK5QDateRK5QTimeN2Qt8TimeSpecE
_ZN9QDateTimeC1ERKS_
_ZN9QDateTimeC1Ev
_ZN9QDateTimeD1Ev
_ZN9QDateTimeaSERKS_
_ZN9QFileInfo7setFileERK7QString
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoC1ERKS_
_ZN9QFileInfoC1Ev
_ZN9QFileInfoD1Ev
_ZN9QHashData11free_helperEPFvPNS_4NodeEE
_ZN9QHashData11shared_nullE
_ZN9QHashData12allocateNodeEi
_ZN9QHashData13detach_helperEPFvPNS_4NodeEPvEPFvS1_Eii
_ZN9QHashData6rehashEi
_ZN9QIODevice11qt_metacallEN11QMetaObject4CallEiPPv
_ZN9QIODevice11qt_metacastEPKc
_ZN9QIODevice11setOpenModeE6QFlagsINS_12OpenModeFlagEE
_ZN9QIODevice12readLineDataEPcx
_ZN9QIODevice14setErrorStringERK7QString
_ZN9QIODevice16staticMetaObjectE
_ZN9QIODevice16waitForReadyReadEi
_ZN9QIODevice19waitForBytesWrittenEi
_ZN9QIODevice4openE6QFlagsINS_12OpenModeFlagEE
_ZN9QIODevice4readEPcx
_ZN9QIODevice4seekEx
_ZN9QIODevice5closeEv
_ZN9QIODevice5resetEv
_ZN9QIODevice5writeEPKcx
_ZN9QIODeviceC2EP7QObject
_ZN9QIODeviceC2Ev
_ZN9QIODeviceD2Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData7disposeEPNS_4DataE
_ZN9QSaveFile16staticMetaObjectE
_ZN9QSaveFile6commitEv
_ZN9QtPrivate20QStringList_containsEPK11QStringListRK7QStringN2Qt15CaseSensitivityE
_ZNK10QTextCodec11fromUnicodeERK7QString
_ZNK10QTextCodec9toUnicodeEPKc
_ZNK10QTextCodec9toUnicodeERK10QByteArray
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QMetaObject4castEP7QObject
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger7warningEPKcz
_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK4QDir16absoluteFilePathERK7QString
_ZNK4QDir16relativeFilePathERK7QString
_ZNK4QDir6existsEv
_ZNK4QDir6mkpathERK7QString
_ZNK4QDir7dirNameEv
_ZNK4QDir8filePathERK7QString
_ZNK5QDate3dayEv
_ZNK5QDate4yearEv
_ZNK5QDate5monthEv
_ZNK5QFile8fileNameEv
_ZNK5QTime4hourEv
_ZNK5QTime6minuteEv
_ZNK5QTime6secondEv
_ZNK7QString10startsWithE5QCharN2Qt15CaseSensitivityE
_ZNK7QString10startsWithERKS_N2Qt15CaseSensitivityE
_ZNK7QString11lastIndexOfE5QChariN2Qt15CaseSensitivityE
_ZNK7QString11toLocal8BitEv
_ZNK7QString18localeAwareCompareERKS_
_ZNK7QString3argExii5QChar
_ZNK7QString3midEii
_ZNK7QString4leftEi
_ZNK7QString5splitE5QCharNS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString6toUtf8Ev
_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE
_ZNK7QString7indexOfE5QChariN2Qt15CaseSensitivityE
_ZNK7QString7toLowerEv
_ZNK7QString8endsWithE5QCharN2Qt15CaseSensitivityE
_ZNK9QDateTime4dateEv
_ZNK9QDateTime4timeEv
_ZNK9QDateTime6isNullEv
_ZNK9QDateTime7msecsToERKS_
_ZNK9QDateTime8addMSecsEx
_ZNK9QDateTimeeqERKS_
_ZNK9QDateTimeltERKS_
_ZNK9QFileInfo11permissionsEv
_ZNK9QFileInfo12absolutePathEv
_ZNK9QFileInfo12lastModifiedEv
_ZNK9QFileInfo16absoluteFilePathEv
_ZNK9QFileInfo4pathEv
_ZNK9QFileInfo5isDirEv
_ZNK9QFileInfo6existsEv
_ZNK9QFileInfo6isFileEv
_ZNK9QFileInfo7createdEv
_ZNK9QFileInfo8fileNameEv
_ZNK9QFileInfo8lastReadEv
_ZNK9QIODevice11canReadLineEv
_ZNK9QIODevice11errorStringEv
_ZNK9QIODevice12bytesToWriteEv
_ZNK9QIODevice14bytesAvailableEv
_ZNK9QIODevice3posEv
_ZNK9QIODevice4sizeEv
_ZNK9QIODevice5atEndEv
_ZNK9QIODevice6isOpenEv
_ZNK9QIODevice8openModeEv
_ZeqRK7QStringS1_
z_adler32
z_crc32
z_deflate
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_get_crc_table
z_gzclose
z_gzdopen
z_gzflush
z_gzopen
z_gzread
z_gzwrite
z_inflate
z_inflateEnd
z_inflateInit2_
z_inflateInit_

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info
__udivdi3
__umoddi3

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
memmove
memset
rand
srand
strcmp
strlen
strncmp
time
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__gxx_personality_v0

Exports

Exports

_ZN10JlCompress10extractDirE7QStringS0_
_ZN10JlCompress10removeFileE11QStringList
_ZN10JlCompress11compressDirE7QStringS0_b
_ZN10JlCompress11extractFileE7QStringS0_S0_
_ZN10JlCompress11extractFileEP6QuaZip7QStringS2_
_ZN10JlCompress11getFileListE7QString
_ZN10JlCompress12compressFileE7QStringS0_
_ZN10JlCompress12compressFileEP6QuaZip7QStringS2_
_ZN10JlCompress12extractFilesE7QString11QStringListS0_
_ZN10JlCompress13compressFilesE7QString11QStringList
_ZN10JlCompress14compressSubDirEP6QuaZip7QStringS2_b
_ZN10QuaAdler325resetEv
_ZN10QuaAdler325valueEv
_ZN10QuaAdler326updateERK10QByteArray
_ZN10QuaAdler329calculateERK10QByteArray
_ZN10QuaAdler32C1Ev
_ZN10QuaAdler32C2Ev
_ZN10QuaZipFile10setZipNameERK7QString
_ZN10QuaZipFile11getFileInfoEP14QuaZipFileInfo
_ZN10QuaZipFile11getFileInfoEP16QuaZipFileInfo64
_ZN10QuaZipFile11qt_metacallEN11QMetaObject4CallEiPPv
_ZN10QuaZipFile11qt_metacastEPKc
_ZN10QuaZipFile11setFileNameERK7QStringN6QuaZip15CaseSensitivityE
_ZN10QuaZipFile16staticMetaObjectE
_ZN10QuaZipFile18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN10QuaZipFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN10QuaZipFile4openE6QFlagsIN9QIODevice12OpenModeFlagEEPiS4_bPKc
_ZN10QuaZipFile4openE6QFlagsIN9QIODevice12OpenModeFlagEERK13QuaZipNewInfoPKcjiibiii
_ZN10QuaZipFile5closeEv
_ZN10QuaZipFile6setZipEP6QuaZip
_ZN10QuaZipFile8readDataEPcx
_ZN10QuaZipFile9writeDataEPKcx
_ZN10QuaZipFileC1EP6QuaZipP7QObject
_ZN10QuaZipFileC1EP7QObject
_ZN10QuaZipFileC1ERK7QStringP7QObject
_ZN10QuaZipFileC1ERK7QStringS2_N6QuaZip15CaseSensitivityEP7QObject
_ZN10QuaZipFileC1Ev
_ZN10QuaZipFileC2EP6QuaZipP7QObject
_ZN10QuaZipFileC2EP7QObject
_ZN10QuaZipFileC2ERK7QStringP7QObject
_ZN10QuaZipFileC2ERK7QStringS2_N6QuaZip15CaseSensitivityEP7QObject
_ZN10QuaZipFileC2Ev
_ZN10QuaZipFileD0Ev
_ZN10QuaZipFileD1Ev
_ZN10QuaZipFileD2Ev
_ZN11QuaGzipFile11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QuaGzipFile11qt_metacastEPKc
_ZN11QuaGzipFile11setFileNameERK7QString
_ZN11QuaGzipFile16staticMetaObjectE
_ZN11QuaGzipFile18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11QuaGzipFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QuaGzipFile4openEi6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QuaGzipFile5closeEv
_ZN11QuaGzipFile5flushEv
_ZN11QuaGzipFile8readDataEPcx
_ZN11QuaGzipFile9writeDataEPKcx
_ZN11QuaGzipFileC1EP7QObject
_ZN11QuaGzipFileC1ERK7QStringP7QObject
_ZN11QuaGzipFileC1Ev
_ZN11QuaGzipFileC2EP7QObject
_ZN11QuaGzipFileC2ERK7QStringP7QObject
_ZN11QuaGzipFileC2Ev
_ZN11QuaGzipFileD0Ev
_ZN11QuaGzipFileD1Ev
_ZN11QuaGzipFileD2Ev
_ZN12QuaZIODevice11qt_metacallEN11QMetaObject4CallEiPPv
_ZN12QuaZIODevice11qt_metacastEPKc
_ZN12QuaZIODevice16staticMetaObjectE
_ZN12QuaZIODevice18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN12QuaZIODevice4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN12QuaZIODevice5closeEv
_ZN12QuaZIODevice5flushEv
_ZN12QuaZIODevice8readDataEPcx
_ZN12QuaZIODevice9writeDataEPKcx
_ZN12QuaZIODeviceC1EP9QIODeviceP7QObject
_ZN12QuaZIODeviceC2EP9QIODeviceP7QObject
_ZN12QuaZIODeviceD0Ev
_ZN12QuaZIODeviceD1Ev
_ZN12QuaZIODeviceD2Ev
_ZN13QuaZipNewInfo14setPermissionsE6QFlagsIN11QFileDevice10PermissionEE
_ZN13QuaZipNewInfo15setFileDateTimeERK7QString
_ZN13QuaZipNewInfo16setFileNTFSTimesERK7QString
_ZN13QuaZipNewInfo16setFileNTFSaTimeERK9QDateTimei
_ZN13QuaZipNewInfo16setFileNTFScTimeERK9QDateTimei
_ZN13QuaZipNewInfo16setFileNTFSmTimeERK9QDateTimei
_ZN13QuaZipNewInfo18setFilePermissionsERK7QString
_ZN13QuaZipNewInfoC1ERK14QuaZipFileInfo
_ZN13QuaZipNewInfoC1ERK16QuaZipFileInfo64
_ZN13QuaZipNewInfoC1ERK7QString
_ZN13QuaZipNewInfoC1ERK7QStringS2_
_ZN13QuaZipNewInfoC2ERK14QuaZipFileInfo
_ZN13QuaZipNewInfoC2ERK16QuaZipFileInfo64
_ZN13QuaZipNewInfoC2ERK7QString
_ZN13QuaZipNewInfoC2ERK7QStringS2_
_ZN6QuaZip10getUnzFileEv
_ZN6QuaZip10getZipFileEv
_ZN6QuaZip10setCommentERK7QString
_ZN6QuaZip10setZipNameERK7QString
_ZN6QuaZip11setIoDeviceEP9QIODevice
_ZN6QuaZip12goToNextFileEv
_ZN6QuaZip13goToFirstFileEv
_ZN6QuaZip14setCurrentFileERK7QStringNS_15CaseSensitivityE
_ZN6QuaZip15setCommentCodecEP10QTextCodec
_ZN6QuaZip15setCommentCodecEPKc
_ZN6QuaZip15setZip64EnabledEb
_ZN6QuaZip16setFileNameCodecEP10QTextCodec
_ZN6QuaZip16setFileNameCodecEPKc
_ZN6QuaZip22convertCaseSensitivityENS_15CaseSensitivityE
_ZN6QuaZip23setDefaultFileNameCodecEP10QTextCodec
_ZN6QuaZip23setDefaultFileNameCodecEPKc
_ZN6QuaZip31setDataDescriptorWritingEnabledEb
_ZN6QuaZip4openENS_4ModeEP19zlib_filefunc_def_s
_ZN6QuaZip5closeEv
_ZN6QuaZipC1EP9QIODevice
_ZN6QuaZipC1ERK7QString
_ZN6QuaZipC1Ev
_ZN6QuaZipC2EP9QIODevice
_ZN6QuaZipC2ERK7QString
_ZN6QuaZipC2Ev
_ZN6QuaZipD1Ev
_ZN6QuaZipD2Ev
_ZN8QuaCrc325resetEv
_ZN8QuaCrc325valueEv
_ZN8QuaCrc326updateERK10QByteArray
_ZN8QuaCrc329calculateERK10QByteArray
_ZN8QuaCrc32C1Ev
_ZN8QuaCrc32C2Ev
_ZN9QuaZipDir10setSortingE6QFlagsIN4QDir8SortFlagEE
_ZN9QuaZipDir14setNameFiltersERK11QStringList
_ZN9QuaZipDir18setCaseSensitivityEN6QuaZip15CaseSensitivityE
_ZN9QuaZipDir2cdERK7QString
_ZN9QuaZipDir4cdUpEv
_ZN9QuaZipDir6filterEv
_ZN9QuaZipDir7setPathERK7QString
_ZN9QuaZipDir9setFilterE6QFlagsIN4QDir6FilterEE
_ZN9QuaZipDirC1EP6QuaZipRK7QString
_ZN9QuaZipDirC1ERKS_
_ZN9QuaZipDirC2EP6QuaZipRK7QString
_ZN9QuaZipDirC2ERKS_
_ZN9QuaZipDirD1Ev
_ZN9QuaZipDirD2Ev
_ZN9QuaZipDiraSERKS_
_ZN9QuaZipDireqERKS_
_ZNK10QuaZipFile10getZipNameEv
_ZNK10QuaZipFile10metaObjectEv
_ZNK10QuaZipFile11getFileNameEv
_ZNK10QuaZipFile11getZipErrorEv
_ZNK10QuaZipFile12isSequentialEv
_ZNK10QuaZipFile14bytesAvailableEv
_ZNK10QuaZipFile17getActualFileNameEv
_ZNK10QuaZipFile18getCaseSensitivityEv
_ZNK10QuaZipFile3posEv
_ZNK10QuaZipFile4sizeEv
_ZNK10QuaZipFile5atEndEv
_ZNK10QuaZipFile5csizeEv
_ZNK10QuaZipFile5isRawEv
_ZNK10QuaZipFile5usizeEv
_ZNK10QuaZipFile6getZipEv
_ZNK11QuaGzipFile10metaObjectEv
_ZNK11QuaGzipFile11getFileNameEv
_ZNK11QuaGzipFile12isSequentialEv
_ZNK12QuaZIODevice10metaObjectEv
_ZNK12QuaZIODevice11getIoDeviceEv
_ZNK12QuaZIODevice12isSequentialEv
_ZNK14QuaZipFileInfo14getPermissionsEv
_ZNK16QuaZipFileInfo6412getNTFSaTimeEPi
_ZNK16QuaZipFileInfo6412getNTFScTimeEPi
_ZNK16QuaZipFileInfo6412getNTFSmTimeEPi
_ZNK16QuaZipFileInfo6414getPermissionsEv
_ZNK16QuaZipFileInfo6416toQuaZipFileInfoER14QuaZipFileInfo
_ZNK6QuaZip10getCommentEv
_ZNK6QuaZip10getZipNameEv
_ZNK6QuaZip11getIoDeviceEv
_ZNK6QuaZip11getZipErrorEv
_ZNK6QuaZip11isAutoCloseEv
_ZNK6QuaZip12setAutoCloseEb
_ZNK6QuaZip14hasCurrentFileEv
_ZNK6QuaZip14isZip64EnabledEv
_ZNK6QuaZip15getCommentCodecEv
_ZNK6QuaZip15getEntriesCountEv
_ZNK6QuaZip15getFileInfoListEv
_ZNK6QuaZip15getFileNameListEv
_ZNK6QuaZip16getFileNameCodecEv
_ZNK6QuaZip17getFileInfoList64Ev
_ZNK6QuaZip18getCurrentFileInfoEP14QuaZipFileInfo
_ZNK6QuaZip18getCurrentFileInfoEP16QuaZipFileInfo64
_ZNK6QuaZip18getCurrentFileNameEv
_ZNK6QuaZip30isDataDescriptorWritingEnabledEv
_ZNK6QuaZip6isOpenEv
_ZNK6QuaZip7getModeEv
_ZNK9QuaZipDir11nameFiltersEv
_ZNK9QuaZipDir13entryInfoListE6QFlagsIN4QDir6FilterEES0_INS1_8SortFlagEE
_ZNK9QuaZipDir13entryInfoListERK11QStringList6QFlagsIN4QDir6FilterEES3_INS4_8SortFlagEE
_ZNK9QuaZipDir15caseSensitivityEv
_ZNK9QuaZipDir15entryInfoList64E6QFlagsIN4QDir6FilterEES0_INS1_8SortFlagEE
_ZNK9QuaZipDir15entryInfoList64ERK11QStringList6QFlagsIN4QDir6FilterEES3_INS4_8SortFlagEE
_ZNK9QuaZipDir16relativeFilePathERK7QString
_ZNK9QuaZipDir4pathEv
_ZNK9QuaZipDir5countEv
_ZNK9QuaZipDir6existsERK7QString
_ZNK9QuaZipDir6existsEv
_ZNK9QuaZipDir6isRootEv
_ZNK9QuaZipDir7dirNameEv
_ZNK9QuaZipDir7sortingEv
_ZNK9QuaZipDir8filePathERK7QString
_ZNK9QuaZipDir9entryListE6QFlagsIN4QDir6FilterEES0_INS1_8SortFlagEE
_ZNK9QuaZipDir9entryListERK11QStringList6QFlagsIN4QDir6FilterEES3_INS4_8SortFlagEE
_ZNK9QuaZipDirixEi
_ZTI10QuaAdler32
_ZTI10QuaZipFile
_ZTI11QuaGzipFile
_ZTI12QuaZIODevice
_ZTI13QuaChecksum32
_ZTI8QuaCrc32
_ZTV10QuaAdler32
_ZTV10QuaZipFile
_ZTV11QuaGzipFile
_ZTV12QuaZIODevice
_ZTV13QuaChecksum32
_ZTV8QuaCrc32

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02524a9970e90c3c5caafd78d8f70534

Headers

File Characteristics

Imports

qt5core

libgcc_s_dw2-1

kernel32

msvcrt

libstdc++-6

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 120KB

.data Size: 512B - Virtual size: 100B

.rdata Size: 6KB - Virtual size: 6KB

.eh_fram Size: 20KB - Virtual size: 20KB

.bss Size: - Virtual size: 1000B

.edata Size: 10KB - Virtual size: 9KB

.idata Size: 9KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 121KB - Virtual size: 120KB

.data
Size: 512B - Virtual size: 100B

.rdata
Size: 6KB - Virtual size: 6KB

.eh_fram
Size: 20KB - Virtual size: 20KB

.bss
Size: - Virtual size: 1000B

.edata
Size: 10KB - Virtual size: 9KB

.idata
Size: 9KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 4KB - Virtual size: 4KB