c1621853a8d4f8cdc395e064327425acd4d705cc978d03fb8d59603aa5500d8c

Sharing

Copy URL Twitter E-mail

General

Target

c1621853a8d4f8cdc395e064327425acd4d705cc978d03fb8d59603aa5500d8c
Size

173KB
MD5

16867f287f684369f0c8a5ca850364a8
SHA1

9d206fc5580f63bfe3e9b15545b42fb79b76fe88
SHA256

c1621853a8d4f8cdc395e064327425acd4d705cc978d03fb8d59603aa5500d8c
SHA512

b6cad1fac46398ec3ddf5550b1de636a5ab3bc69af23f3a6a492a060d3801133f7c67ff520915471d8244f172a5699d163bf587110f5f78fd0592118fe3b083f
SSDEEP

3072:lMM6OySecRDAJcV/kB7wgOBKDySL2Go2lQBV+UdE+rECWp7hKWTtimDfM:lH6OHecx6cVi7wgOBKW/HBV+UdvrEFpE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1621853a8d4f8cdc395e064327425acd4d705cc978d03fb8d59603aa5500d8c

Files

c1621853a8d4f8cdc395e064327425acd4d705cc978d03fb8d59603aa5500d8c
.dll windows:5 windows x86 arch:x86

bae0bebb420f5a4236e943d486352b64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

qt5network

??0QNetworkProxy@@QAE@XZ
?peerVerifyError@QSslSocket@@QAEXABVQSslError@@@Z
?encrypted@QSslSocket@@QAEXXZ
?addPendingConnection@QTcpServer@@IAEXPAVQTcpSocket@@@Z
?startServerEncryption@QSslSocket@@QAEXXZ
??1QTcpServer@@UAE@XZ
?incomingConnection@QTcpServer@@MAEXH@Z
?nextPendingConnection@QTcpServer@@UAEPAVQTcpSocket@@XZ
?hasPendingConnections@QTcpServer@@UBE_NXZ
?qt_metacall@QTcpServer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QTcpServer@@UAEPAXPBD@Z
?metaObject@QTcpServer@@UBEPBUQMetaObject@@XZ
??0QTcpServer@@QAE@PAVQObject@@@Z
?newConnection@QTcpServer@@QAEXXZ
?acceptError@QTcpServer@@QAEXW4SocketError@QAbstractSocket@@@Z
?close@QTcpServer@@QAEXXZ
?staticMetaObject@QTcpServer@@2UQMetaObject@@B
?listen@QTcpServer@@QAE_NABVQHostAddress@@G@Z
?serverError@QTcpServer@@QBE?AW4SocketError@QAbstractSocket@@XZ
?staticMetaObject@QTcpSocket@@2UQMetaObject@@B
?socketDescriptor@QTcpServer@@QBEHXZ
?setSocketDescriptor@QTcpServer@@QAE_NH@Z
?maxPendingConnections@QTcpServer@@QBEHXZ
?setMaxPendingConnections@QTcpServer@@QAEXH@Z
?serverPort@QTcpServer@@QBEGXZ
?serverAddress@QTcpServer@@QBE?AVQHostAddress@@XZ
?resumeAccepting@QTcpServer@@QAEXXZ
?setProxy@QTcpServer@@QAEXABVQNetworkProxy@@@Z
?proxy@QTcpServer@@QBE?AVQNetworkProxy@@XZ
?pauseAccepting@QTcpServer@@QAEXXZ
?isListening@QTcpServer@@QBE_NXZ
?errorString@QTcpServer@@QBE?AVQString@@XZ
??1QTcpSocket@@UAE@XZ
??1QSslSocket@@UAE@XZ
?waitForDisconnected@QAbstractSocket@@UAE_NH@Z
?waitForConnected@QAbstractSocket@@UAE_NH@Z
?socketOption@QAbstractSocket@@UAE?AVQVariant@@W4SocketOption@1@@Z
?setSocketOption@QAbstractSocket@@UAEXW4SocketOption@1@ABVQVariant@@@Z
?setSocketDescriptor@QAbstractSocket@@UAE_NHW4SocketState@1@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?setReadBufferSize@QAbstractSocket@@UAEX_J@Z
?disconnectFromHost@QAbstractSocket@@UAEXXZ
?connectToHost@QAbstractSocket@@UAEXABVQString@@GV?$QFlags@W4OpenModeFlag@QIODevice@@@@W4NetworkLayerProtocol@1@@Z
?resume@QAbstractSocket@@UAEXXZ
?writeData@QAbstractSocket@@MAE_JPBD_J@Z
?readData@QAbstractSocket@@MAE_JPAD_J@Z
?waitForBytesWritten@QAbstractSocket@@UAE_NH@Z
?waitForReadyRead@QAbstractSocket@@UAE_NH@Z
?canReadLine@QAbstractSocket@@UBE_NXZ
?bytesToWrite@QAbstractSocket@@UBE_JXZ
?bytesAvailable@QAbstractSocket@@UBE_JXZ
?atEnd@QAbstractSocket@@UBE_NXZ
?close@QAbstractSocket@@UAEXXZ
?qt_metacall@QTcpSocket@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QTcpSocket@@UAEPAXPBD@Z
?metaObject@QTcpSocket@@UBEPBUQMetaObject@@XZ
?waitForDisconnected@QSslSocket@@UAE_NH@Z
?waitForConnected@QSslSocket@@UAE_NH@Z
?socketOption@QSslSocket@@UAE?AVQVariant@@W4SocketOption@QAbstractSocket@@@Z
?setSocketOption@QSslSocket@@UAEXW4SocketOption@QAbstractSocket@@ABVQVariant@@@Z
?setSocketDescriptor@QSslSocket@@UAE_NHW4SocketState@QAbstractSocket@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?socketDescriptor@QAbstractSocket@@UBEHXZ
?setReadBufferSize@QSslSocket@@UAEX_J@Z
?disconnectFromHost@QSslSocket@@UAEXXZ
?connectToHost@QSslSocket@@UAEXABVQString@@GV?$QFlags@W4OpenModeFlag@QIODevice@@@@W4NetworkLayerProtocol@QAbstractSocket@@@Z
?connectToHost@QAbstractSocket@@UAEXABVQHostAddress@@GV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?resume@QSslSocket@@UAEXXZ
?writeData@QSslSocket@@MAE_JPBD_J@Z
?readLineData@QAbstractSocket@@MAE_JPAD_J@Z
?readData@QSslSocket@@MAE_JPAD_J@Z
?waitForBytesWritten@QSslSocket@@UAE_NH@Z
?waitForReadyRead@QSslSocket@@UAE_NH@Z
?canReadLine@QSslSocket@@UBE_NXZ
?bytesToWrite@QSslSocket@@UBE_JXZ
?bytesAvailable@QSslSocket@@UBE_JXZ
?atEnd@QSslSocket@@UBE_NXZ
?close@QSslSocket@@UAEXXZ
?isSequential@QAbstractSocket@@UBE_NXZ
?qt_metacall@QSslSocket@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QSslSocket@@UAEPAXPBD@Z
?metaObject@QSslSocket@@UBEPBUQMetaObject@@XZ
?supportsSsl@QSslSocket@@SA_NXZ
??0QSslSocket@@QAE@PAVQObject@@@Z
?encryptedBytesWritten@QSslSocket@@QAEX_J@Z
?sslErrors@QSslSocket@@QAEXABV?$QList@VQSslError@@@@@Z
?setSslConfiguration@QSslSocket@@QAEXABVQSslConfiguration@@@Z
?ignoreSslErrors@QSslSocket@@QAEXABV?$QList@VQSslError@@@@@Z
?setProxy@QAbstractSocket@@QAEXABVQNetworkProxy@@@Z
?connectToHostEncrypted@QSslSocket@@QAEXABVQString@@GV?$QFlags@W4OpenModeFlag@QIODevice@@@@W4NetworkLayerProtocol@QAbstractSocket@@@Z
??0QTcpSocket@@QAE@PAVQObject@@@Z
?error@QAbstractSocket@@QAEXW4SocketError@1@@Z
?proxyAuthenticationRequired@QAbstractSocket@@QAEXABVQNetworkProxy@@PAVQAuthenticator@@@Z
?stateChanged@QAbstractSocket@@QAEXW4SocketState@1@@Z
?staticMetaObject@QAbstractSocket@@2UQMetaObject@@B
?state@QAbstractSocket@@QBE?AW4SocketState@1@XZ
?pauseMode@QAbstractSocket@@QBE?AV?$QFlags@W4PauseMode@QAbstractSocket@@@@XZ
?readBufferSize@QAbstractSocket@@QBE_JXZ
??1QNetworkProxy@@QAE@XZ
??1QSslConfiguration@@QAE@XZ
?defaultConfiguration@QSslConfiguration@@SA?AV1@XZ
??0QNetworkProxy@@QAE@W4ProxyType@0@ABVQString@@G11@Z
?isValid@QAbstractSocket@@QBE_NXZ
?setPauseMode@QAbstractSocket@@QAEXV?$QFlags@W4PauseMode@QAbstractSocket@@@@@Z
?peerPort@QAbstractSocket@@QBEGXZ
?peerName@QAbstractSocket@@QBE?AVQString@@XZ
?peerAddress@QAbstractSocket@@QBE?AVQHostAddress@@XZ
?localPort@QAbstractSocket@@QBEGXZ
??0QHostAddress@@QAE@XZ
?localAddress@QAbstractSocket@@QBE?AVQHostAddress@@XZ
??4QHostAddress@@QAEAAV0@ABV0@@Z
??1QHostAddress@@QAE@XZ
?ignoreSslErrors@QSslSocket@@QAEXXZ
?flush@QAbstractSocket@@QAE_NXZ
?error@QAbstractSocket@@QBE?AW4SocketError@1@XZ
?abort@QAbstractSocket@@QAEXXZ
??0QSslError@@QAE@ABV0@@Z
??1QSslError@@QAE@XZ
?staticMetaObject@QSslSocket@@2UQMetaObject@@B
??8QNetworkProxy@@QBE_NABV0@@Z
??4QNetworkProxy@@QAEAAV0@ABV0@@Z
??0QNetworkProxy@@QAE@ABV0@@Z
??0QSslConfiguration@@QAE@ABV0@@Z
??4QSslConfiguration@@QAEAAV0@ABV0@@Z

qt5core

?staticMetaObject@QObject@@2UQMetaObject@@B
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?qrand@@YAHXZ
?currentMSecsSinceEpoch@QDateTime@@SA_JXZ
?qsrand@@YAXI@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QObject@@UAEPAXPBD@Z
?metaObject@QObject@@UBEPBUQMetaObject@@XZ
?read@QIODevice@@QAE_JPAD_J@Z
?read@QIODevice@@QAE?AVQByteArray@@_J@Z
??6QDebug@@QAEAAV0@PBD@Z
?tr@QObject@@SA?AVQString@@PBD0H@Z
?codecForName@QTextCodec@@SAPAV1@PBD@Z
?arg@QString@@QBE?AV1@GHHVQChar@@@Z
?codecForName@QTextCodec@@SAPAV1@ABVQByteArray@@@Z
?toUnicode@QTextCodec@@QBE?AVQString@@PBDHPAUConverterState@1@@Z
?clear@QByteArray@@QAEXXZ
??1ConverterState@QTextCodec@@QAE@XZ
??0QObject@@QAE@PAV0@@Z
?currentDateTimeUtc@QDateTime@@SA?AV1@XZ
?toString@QDateTime@@QBE?AVQString@@ABV2@@Z
??1QDateTime@@QAE@XZ
?firstNode@QHashData@@QAEPAUNode@1@XZ
?hasShrunk@QHashData@@QAEXXZ
?realloc@QListData@@QAEXH@Z
?qHash@@YAIABVQString@@I@Z
?freeNode@QHashData@@QAEXPAX@Z
?previousNode@QHashData@@SAPAUNode@1@PAU21@@Z
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?constData@QByteArray@@QBEPBDXZ
??6QTextStream@@QAEAAV0@PBD@Z
?setStatus@QTextStream@@QAEXW4Status@1@@Z
?status@QTextStream@@QBE?AW4Status@1@XZ
?readLine@QTextStream@@QAE?AVQString@@_J@Z
?split@QString@@QBE?AVQStringList@@VQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?fromEncoded@QUrl@@SA?AV1@ABVQByteArray@@W4ParsingMode@1@@Z
??4QUrl@@QAEAAV0@$$QAV0@@Z
?isRelative@QUrl@@QBE_NXZ
?setHost@QUrl@@QAEXABVQString@@W4ParsingMode@1@@Z
??0QString@@QAE@$$QAV0@@Z
?setScheme@QUrl@@QAEXABVQString@@@Z
?toUInt@QString@@QBEIPA_NH@Z
?clear@QString@@QAEXXZ
?clear@QUrl@@QAEXXZ
?nextNode@QMapNodeBase@@QBEPBU1@XZ
?rehash@QHashData@@QAEXH@Z
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?allocateNode@QHashData@@QAEPAXH@Z
?shared_null@QHashData@@2U1@B
?fatal@QMessageLogger@@QBAXPBDZZ
?invokeMethod@QMetaObject@@SA_NPAVQObject@@PBDW4ConnectionType@Qt@@VQGenericArgument@@333333333@Z
??0QMessageLogger@@QAE@PBDH0@Z
?warning@QMessageLogger@@QBE?AVQDebug@@XZ
??6QTextStream@@QAEAAV0@D@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?maybeSpace@QDebug@@QAEAAV1@XZ
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@ABVQString@@@Z
??0QTextStream@@QAE@PAVQIODevice@@@Z
?flush@QTextStream@@QAEXXZ
??1QTextStream@@UAE@XZ
?disconnectImpl@QObject@@CA_NPBV1@PAPAX01PBUQMetaObject@@@Z
?reset@QIODevice@@UAE_NXZ
?seek@QIODevice@@UAE_N_J@Z
?size@QIODevice@@UBE_JXZ
?pos@QIODevice@@UBE_JXZ
?open@QIODevice@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?isValid@QUrl@@QBE_NXZ
?deleteLater@QObject@@QAEXXZ
?path@QUrl@@QBE?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
?query@QUrl@@QBE?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
?endsWith@QString@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?scheme@QUrl@@QBE?AVQString@@XZ
??0QVariant@@QAE@H@Z
??1QVariant@@QAE@XZ
?bytesWritten@QIODevice@@QAEX_J@Z
??1Connection@QMetaObject@@QAE@XZ
?readChannelFinished@QIODevice@@QAEXXZ
?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z
??1QObject@@UAE@XZ
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
??0QObject@@IAE@AAVQObjectPrivate@@PAV0@@Z
??0QString@@QAE@ABV0@@Z
??1QString@@QAE@XZ
??0QString@@QAE@XZ
??8@YA_NABVQString@@0@Z
?append@QString@@QAEAAV1@ABV1@@Z
?append@QByteArray@@QAEAAV1@ABV1@@Z
??0QByteArray@@QAE@ABV0@@Z
?constData@QString@@QBEPBVQChar@@XZ
?QStringList_join@QtPrivate@@YA?AVQString@@PBVQStringList@@PBVQChar@@H@Z
?QStringList_contains@QtPrivate@@YA_NPBVQStringList@@ABVQString@@W4CaseSensitivity@Qt@@@Z
??4QString@@QAEAAV0@ABV0@@Z
??4QUrl@@QAEAAV0@ABV0@@Z
??9QUrl@@QBE_NABV0@@Z
?disconnect@QObject@@SA_NPBV1@PBD01@Z
??0QUrl@@QAE@ABV0@@Z
??1QByteArray@@QAE@XZ
?toBase64@QByteArray@@QBE?AV1@XZ
?append@QByteArray@@QAEAAV1@PBDH@Z
??0QByteArray@@QAE@XZ
?append@QString@@QAEAAV1@VQChar@@@Z
?getChar@QIODevice@@QAE_NPAD@Z
?elapsed@QTime@@QBEHXZ
?shared_null@QListData@@2UData@1@B
?shared_null@QMapDataBase@@2U1@B
?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z
?createNode@QMapDataBase@@QAEPAUQMapNodeBase@@HHPAU2@_N@Z
??M@YA_NABVQString@@0@Z
?createData@QMapDataBase@@SAPAU1@XZ
?dispose@QListData@@SAXPAUData@1@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
?errorString@QIODevice@@QBE?AVQString@@XZ
?toString@QUrl@@QBE?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
??1QUrl@@QAE@XZ
?append@QByteArray@@QAEAAV1@D@Z
?arg@QString@@QBE?AV1@HHHVQChar@@@Z
?arg@QString@@QBE?AV1@_JHHVQChar@@@Z
?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?write@QIODevice@@QAE_JPBD_J@Z
?write@QIODevice@@QAE_JABVQByteArray@@@Z
?data@QByteArray@@QAEPADXZ
?detach@QByteArray@@QAEXXZ
?fromLatin1@QString@@SA?AV1@ABVQByteArray@@@Z
?hash@QCryptographicHash@@SA?AVQByteArray@@ABV2@W4Algorithm@1@@Z
??0QByteArray@@QAE@$$QAV0@@Z
?freeData@QMapDataBase@@SAXPAU1@@Z
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z
??0QString@@QAE@HW4Initialization@Qt@@@Z
?get@QObjectPrivate@@SAPAV1@PAVQObject@@@Z
?toUtf8@QString@@QBE?AVQByteArray@@XZ
?restart@QTime@@QAEHXZ
?left@QByteArray@@QBE?AV1@H@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?recalcMostLeftNode@QMapDataBase@@QAEXXZ
??0QUrl@@QAE@XZ
??0QObjectPrivate@@QAE@H@Z
??1QObjectPrivate@@UAE@XZ
?append@QListData@@QAEPAPAXXZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
?staticMetaObject@QIODevice@@2UQMetaObject@@B
?number@QString@@SA?AV1@HH@Z
?indexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAXPBX@Z2P6APAX13@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?registerNormalizedTypedef@QMetaType@@SAHABVQByteArray@@H@Z
?toLatin1@QString@@QBE?AVQByteArray@@XZ
?host@QUrl@@QBE?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
?port@QUrl@@QBEHH@Z
??4QByteArray@@QAEAAV0@$$QAV0@@Z
?erase@QListData@@QAEPAPAXPAPAX@Z
??1QRegularExpression@@QAE@XZ
??1QRegularExpressionMatch@@QAE@XZ
?toFloat@QStringRef@@QBEMPA_N@Z
?midRef@QString@@QBE?AVQStringRef@@HH@Z
?toLower@QString@@QBE?AV1@XZ
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?trimmed@QString@@QBE?AV1@XZ
?toInt@QString@@QBEHPA_NH@Z
?capturedTexts@QRegularExpressionMatch@@QBE?AVQStringList@@XZ
?hasMatch@QRegularExpressionMatch@@QBE_NXZ
?match@QRegularExpression@@QBE?AVQRegularExpressionMatch@@ABVQString@@HW4MatchType@1@V?$QFlags@W4MatchOption@QRegularExpression@@@@@Z
??0QRegularExpression@@QAE@ABVQString@@V?$QFlags@W4PatternOption@QRegularExpression@@@@@Z
?readyRead@QIODevice@@QAEXXZ
?aboutToClose@QIODevice@@QAEXXZ

msvcr100

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_purecall
memcpy
??2@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer

Exports

Exports

??0QMaskGenerator@@QAE@PAVQObject@@@Z
??0QWebSocket@@AAE@PAVQTcpSocket@@W4Version@QWebSocketProtocol@@PAVQObject@@@Z
??0QWebSocket@@QAE@ABVQString@@W4Version@QWebSocketProtocol@@PAVQObject@@@Z
??0QWebSocketCorsAuthenticator@@QAE@$$QAV0@@Z
??0QWebSocketCorsAuthenticator@@QAE@ABV0@@Z
??0QWebSocketCorsAuthenticator@@QAE@ABVQString@@@Z
??0QWebSocketServer@@QAE@ABVQString@@W4SslMode@0@PAVQObject@@@Z
??1QMaskGenerator@@UAE@XZ
??1QWebSocket@@UAE@XZ
??1QWebSocketCorsAuthenticator@@QAE@XZ
??1QWebSocketServer@@UAE@XZ
??4QWebSocketCorsAuthenticator@@QAEAAV0@$$QAV0@@Z
??4QWebSocketCorsAuthenticator@@QAEAAV0@ABV0@@Z
??_7QMaskGenerator@@6B@
??_7QWebSocket@@6B@
??_7QWebSocketServer@@6B@
??_FQMaskGenerator@@QAEXXZ
??_FQWebSocket@@QAEXXZ
?abort@QWebSocket@@QAEXXZ
?aboutToClose@QWebSocket@@QAEXXZ
?acceptError@QWebSocketServer@@QAEXW4SocketError@QAbstractSocket@@@Z
?allowed@QWebSocketCorsAuthenticator@@QBE_NXZ
?binaryFrameReceived@QWebSocket@@QAEXABVQByteArray@@_N@Z
?binaryMessageReceived@QWebSocket@@QAEXABVQByteArray@@@Z
?bytesWritten@QWebSocket@@QAEX_J@Z
?close@QWebSocket@@QAEXW4CloseCode@QWebSocketProtocol@@ABVQString@@@Z
?close@QWebSocketServer@@QAEXXZ
?closeCode@QWebSocket@@QBE?AW4CloseCode@QWebSocketProtocol@@XZ
?closeReason@QWebSocket@@QBE?AVQString@@XZ
?closed@QWebSocketServer@@QAEXXZ
?connected@QWebSocket@@QAEXXZ
?d_func@QWebSocket@@AAEPAVQWebSocketPrivate@@XZ
?d_func@QWebSocket@@ABEPBVQWebSocketPrivate@@XZ
?d_func@QWebSocketCorsAuthenticator@@AAEPAVQWebSocketCorsAuthenticatorPrivate@@XZ
?d_func@QWebSocketCorsAuthenticator@@ABEPBVQWebSocketCorsAuthenticatorPrivate@@XZ
?d_func@QWebSocketServer@@AAEPAVQWebSocketServerPrivate@@XZ
?d_func@QWebSocketServer@@ABEPBVQWebSocketServerPrivate@@XZ
?disconnected@QWebSocket@@QAEXXZ
?error@QWebSocket@@QAEXW4SocketError@QAbstractSocket@@@Z
?error@QWebSocket@@QBE?AW4SocketError@QAbstractSocket@@XZ
?error@QWebSocketServer@@QBE?AW4CloseCode@QWebSocketProtocol@@XZ
?errorString@QWebSocket@@QBE?AVQString@@XZ
?errorString@QWebSocketServer@@QBE?AVQString@@XZ
?flush@QWebSocket@@QAE_NXZ
?hasPendingConnections@QWebSocketServer@@QBE_NXZ
?ignoreSslErrors@QWebSocket@@QAEXABV?$QList@VQSslError@@@@@Z
?ignoreSslErrors@QWebSocket@@QAEXXZ
?isListening@QWebSocketServer@@QBE_NXZ
?isValid@QWebSocket@@QBE_NXZ
?listen@QWebSocketServer@@QAE_NABVQHostAddress@@G@Z
?localAddress@QWebSocket@@QBE?AVQHostAddress@@XZ
?localPort@QWebSocket@@QBEGXZ
?maskGenerator@QWebSocket@@QBEPBVQMaskGenerator@@XZ
?maxPendingConnections@QWebSocketServer@@QBEHXZ
?metaObject@QWebSocket@@UBEPBUQMetaObject@@XZ
?metaObject@QWebSocketServer@@UBEPBUQMetaObject@@XZ
?newConnection@QWebSocketServer@@QAEXXZ
?nextPendingConnection@QWebSocketServer@@UAEPAVQWebSocket@@XZ
?open@QWebSocket@@QAEXABVQUrl@@@Z
?origin@QWebSocket@@QBE?AVQString@@XZ
?origin@QWebSocketCorsAuthenticator@@QBE?AVQString@@XZ
?originAuthenticationRequired@QWebSocketServer@@QAEXPAVQWebSocketCorsAuthenticator@@@Z
?pauseAccepting@QWebSocketServer@@QAEXXZ
?pauseMode@QWebSocket@@QBE?AV?$QFlags@W4PauseMode@QAbstractSocket@@@@XZ
?peerAddress@QWebSocket@@QBE?AVQHostAddress@@XZ
?peerName@QWebSocket@@QBE?AVQString@@XZ
?peerPort@QWebSocket@@QBEGXZ
?peerVerifyError@QWebSocketServer@@QAEXABVQSslError@@@Z
?ping@QWebSocket@@QAEXABVQByteArray@@@Z
?pong@QWebSocket@@QAEX_KABVQByteArray@@@Z
?proxy@QWebSocket@@QBE?AVQNetworkProxy@@XZ
?proxy@QWebSocketServer@@QBE?AVQNetworkProxy@@XZ
?proxyAuthenticationRequired@QWebSocket@@QAEXABVQNetworkProxy@@PAVQAuthenticator@@@Z
?qt_metacall@QWebSocket@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QWebSocketServer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QWebSocket@@UAEPAXPBD@Z
?qt_metacast@QWebSocketServer@@UAEPAXPBD@Z
?qt_static_metacall@QWebSocket@@CAXPAVQObject@@W4Call@QMetaObject@@HPAPAX@Z
?qt_static_metacall@QWebSocketServer@@CAXPAVQObject@@W4Call@QMetaObject@@HPAPAX@Z
?readBufferSize@QWebSocket@@QBE_JXZ
?readChannelFinished@QWebSocket@@QAEXXZ
?requestUrl@QWebSocket@@QBE?AVQUrl@@XZ
?resourceName@QWebSocket@@QBE?AVQString@@XZ
?resume@QWebSocket@@QAEXXZ
?resumeAccepting@QWebSocketServer@@QAEXXZ
?secureMode@QWebSocketServer@@QBE?AW4SslMode@1@XZ
?sendBinaryMessage@QWebSocket@@QAE_JABVQByteArray@@@Z
?sendTextMessage@QWebSocket@@QAE_JABVQString@@@Z
?serverAddress@QWebSocketServer@@QBE?AVQHostAddress@@XZ
?serverError@QWebSocketServer@@QAEXW4CloseCode@QWebSocketProtocol@@@Z
?serverName@QWebSocketServer@@QBE?AVQString@@XZ
?serverPort@QWebSocketServer@@QBEGXZ
?setAllowed@QWebSocketCorsAuthenticator@@QAEX_N@Z
?setMaskGenerator@QWebSocket@@QAEXPBVQMaskGenerator@@@Z
?setMaxPendingConnections@QWebSocketServer@@QAEXH@Z
?setPauseMode@QWebSocket@@QAEXV?$QFlags@W4PauseMode@QAbstractSocket@@@@@Z
?setProxy@QWebSocket@@QAEXABVQNetworkProxy@@@Z
?setProxy@QWebSocketServer@@QAEXABVQNetworkProxy@@@Z
?setReadBufferSize@QWebSocket@@QAEX_J@Z
?setServerName@QWebSocketServer@@QAEXABVQString@@@Z
?setSocketDescriptor@QWebSocketServer@@QAE_NH@Z
?setSslConfiguration@QWebSocket@@QAEXABVQSslConfiguration@@@Z
?setSslConfiguration@QWebSocketServer@@QAEXABVQSslConfiguration@@@Z
?socketDescriptor@QWebSocketServer@@QBEHXZ
?sslConfiguration@QWebSocket@@QBE?AVQSslConfiguration@@XZ
?sslConfiguration@QWebSocketServer@@QBE?AVQSslConfiguration@@XZ
?sslErrors@QWebSocket@@QAEXABV?$QList@VQSslError@@@@@Z
?sslErrors@QWebSocketServer@@QAEXABV?$QList@VQSslError@@@@@Z
?state@QWebSocket@@QBE?AW4SocketState@QAbstractSocket@@XZ
?stateChanged@QWebSocket@@QAEXW4SocketState@QAbstractSocket@@@Z
?staticMetaObject@QWebSocket@@2UQMetaObject@@B
?staticMetaObject@QWebSocketServer@@2UQMetaObject@@B
?supportedVersions@QWebSocketServer@@QBE?AV?$QList@W4Version@QWebSocketProtocol@@@@XZ
?swap@QWebSocketCorsAuthenticator@@QAEXAAV1@@Z
?textFrameReceived@QWebSocket@@QAEXABVQString@@_N@Z
?textMessageReceived@QWebSocket@@QAEXABVQString@@@Z
?tr@QWebSocket@@SA?AVQString@@PBD0H@Z
?tr@QWebSocketServer@@SA?AVQString@@PBD0H@Z
?trUtf8@QWebSocket@@SA?AVQString@@PBD0H@Z
?trUtf8@QWebSocketServer@@SA?AVQString@@PBD0H@Z
?version@QWebSocket@@QBE?AW4Version@QWebSocketProtocol@@XZ

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bae0bebb420f5a4236e943d486352b64

Headers

DLL Characteristics

File Characteristics

Imports

qt5network

qt5core

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB