qtquickextrasflatplugin[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

qtquickextrasflatplugin.dll
Size

786KB
MD5

d540dffe27a4578a5db0f644c913f51f
SHA1

fbc396c6aefc5385f06b90b1dd8fb9142364f02d
SHA256

b6be64c95769618140408256f5e73e4ced4db42e4a0851ded03048a7afdf83d1
SHA512

bd720fc066963b1c1abb8541125ca60677f47723de12ba11226f3499fe6d205806b34d4fab1a66fee87c3d4c27f6a95174a7668effec0eae1e7cf15ab7fac468
SSDEEP

24576:DgIwhCNoh+JJ9f9VhCNoh+5i9FrIJJpCNoh+7h:B2UJ//UioGh

Score

1^/10

Malware Config

Signatures

Files

qtquickextrasflatplugin.dll
.dll .js windows:6 windows x64 arch:x64 polyglot

Password: v1rusQ*

c447c99f2730b8b15c932112504c78f0

Code Sign

33:00:00:05:4e:12:b9:0a:00:7b:12:49:99:00:00:00:00:05:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:50

Not After

16/10/2024, 19:50

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:e2:46:e8:5c:fa:4f:fd:12:ba:60:08:e2:60:b5:a0:e4:22:af:48:1f:82:bf:41:10:44:20:a1:74:71:35:c9
Signer

Actual PE Digest

79:e2:46:e8:5c:fa:4f:fd:12:ba:60:08:e2:60:b5:a0:e4:22:af:48:1f:82:bf:41:10:44:20:a1:74:71:35:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\build\qtquickcontrols\qml\QtQuick\Controls\Styles\Flat\qtquickextrasflatplugin.pdb

Imports

qt5quick

?qt_metacast@QQuickPaintedItem@@UEAAPEAXPEBD@Z
?staticMetaObject@QQuickPaintedItem@@2UQMetaObject@@B
?setAntialiasing@QQuickPaintedItem@@QEAAX_N@Z
?update@QQuickPaintedItem@@QEAAXAEBVQRect@@@Z
??1QQuickPaintedItem@@UEAA@XZ
??0QQuickPaintedItem@@QEAA@PEAVQQuickItem@@@Z
?setImplicitHeight@QQuickItem@@QEAAXN@Z
?setImplicitWidth@QQuickItem@@QEAAXN@Z
?itemChange@QQuickPaintedItem@@MEAAXW4ItemChange@QQuickItem@@AEBTItemChangeData@3@@Z
?boundingRect@QQuickItem@@UEBA?AVQRectF@@XZ
?updatePaintNode@QQuickPaintedItem@@MEAAPEAVQSGNode@@PEAV2@PEAUUpdatePaintNodeData@QQuickItem@@@Z
?textureProvider@QQuickPaintedItem@@UEBAPEAVQSGTextureProvider@@XZ
?isTextureProvider@QQuickPaintedItem@@UEBA_NXZ
?updatePolish@QQuickItem@@MEAAXXZ
?geometryChanged@QQuickItem@@MEAAXAEBVQRectF@@0@Z
?windowDeactivateEvent@QQuickItem@@MEAAXXZ
?childMouseEventFilter@QQuickItem@@MEAA_NPEAV1@PEAVQEvent@@@Z
?dropEvent@QQuickItem@@MEAAXPEAVQDropEvent@@@Z
?dragLeaveEvent@QQuickItem@@MEAAXPEAVQDragLeaveEvent@@@Z
?dragMoveEvent@QQuickItem@@MEAAXPEAVQDragMoveEvent@@@Z
?dragEnterEvent@QQuickItem@@MEAAXPEAVQDragEnterEvent@@@Z
?hoverLeaveEvent@QQuickItem@@MEAAXPEAVQHoverEvent@@@Z
?hoverMoveEvent@QQuickItem@@MEAAXPEAVQHoverEvent@@@Z
?qt_metacall@QQuickPaintedItem@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?hoverEnterEvent@QQuickItem@@MEAAXPEAVQHoverEvent@@@Z
?touchEvent@QQuickItem@@MEAAXPEAVQTouchEvent@@@Z
?wheelEvent@QQuickItem@@MEAAXPEAVQWheelEvent@@@Z
?touchUngrabEvent@QQuickItem@@MEAAXXZ
?mouseUngrabEvent@QQuickItem@@MEAAXXZ
?mouseDoubleClickEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?mouseReleaseEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?mouseMoveEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?mousePressEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?focusOutEvent@QQuickItem@@MEAAXPEAVQFocusEvent@@@Z
?focusInEvent@QQuickItem@@MEAAXPEAVQFocusEvent@@@Z
?inputMethodEvent@QQuickItem@@MEAAXPEAVQInputMethodEvent@@@Z
?keyReleaseEvent@QQuickItem@@MEAAXPEAVQKeyEvent@@@Z
?keyPressEvent@QQuickItem@@MEAAXPEAVQKeyEvent@@@Z
?componentComplete@QQuickItem@@MEAAXXZ
?classBegin@QQuickItem@@MEAAXXZ
?event@QQuickItem@@MEAA_NPEAVQEvent@@@Z
?inputMethodQuery@QQuickItem@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?contains@QQuickItem@@UEBA_NAEBVQPointF@@@Z
?clipRect@QQuickItem@@UEBA?AVQRectF@@XZ
?releaseResources@QQuickPaintedItem@@MEAAXXZ

qt5gui

?fillRect@QPainter@@QEAAXAEBVQRect@@AEBVQColor@@@Z
??0QPainterPath@@QEAA@XZ
??1QPainterPath@@QEAA@XZ
?moveTo@QPainterPath@@QEAAXAEBVQPointF@@@Z
?cubicTo@QPainterPath@@QEAAXAEBVQPointF@@00@Z
??0QColor@@QEAA@HHHH@Z
??4QColor@@QEAAAEAV0@AEBV0@@Z
?translate@QPainter@@QEAAXAEBVQPointF@@@Z
??9QColor@@QEBA_NAEBV0@@Z
??0QBrush@@QEAA@AEBVQColor@@W4BrushStyle@Qt@@@Z
??1QBrush@@QEAA@XZ
?save@QPainter@@QEAAXXZ
??0QColor@@QEAA@XZ
?restore@QPainter@@QEAAXXZ
?fillPath@QPainter@@QEAAXAEBVQPainterPath@@AEBVQBrush@@@Z
?scale@QPainter@@QEAAXNN@Z

qt5qml

?initializeEngine@QQmlExtensionPlugin@@UEAAXPEAVQQmlEngine@@PEBD@Z
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPEAVQObject@@@Z
??1QQmlExtensionPlugin@@UEAA@XZ
??0QQmlExtensionPlugin@@QEAA@PEAVQObject@@@Z
?staticMetaObject@QQmlExtensionPlugin@@2UQMetaObject@@B
?qt_metacall@QQmlExtensionPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QQmlExtensionPlugin@@UEAAPEAXPEBD@Z

qt5core

?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?qResourceFeatureZlib@@YAEXZ
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?isRelative@QUrl@@QEBA_NXZ
??1QUrl@@QEAA@XZ
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
??0QUrl@@QEAA@AEBV0@@Z
?registerNormalizedTypedef@QMetaType@@SAHAEBVQByteArray@@H@Z
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
?fromUtf8@QString@@SA?AV1@PEBDH@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
??0QString@@QEAA@XZ
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?append@QByteArray@@QEAAAEAV1@D@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@PEBDH@Z
??0QByteArray@@QEAA@XZ
?className@QMetaObject@@QEBAPEBDXZ
?warning@QMessageLogger@@QEBAXPEBDZZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?reserve@QByteArray@@QEAAXH@Z

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive

vcruntime140

memcpy
__C_specific_handler
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_configure_narrow_argv
_initterm
_initterm_e
_seh_filter_dll

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata
qt_quick_controls_style_init
qt_quick_controls_style_path

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 757KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: v1rusQ*

c447c99f2730b8b15c932112504c78f0

Code Sign

33:00:00:05:4e:12:b9:0a:00:7b:12:49:99:00:00:00:00:05:4eCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

79:e2:46:e8:5c:fa:4f:fd:12:ba:60:08:e2:60:b5:a0:e4:22:af:48:1f:82:bf:41:10:44:20:a1:74:71:35:c9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

qt5quick

qt5gui

qt5qml

qt5core

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 757KB - Virtual size: 756KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 960B

.qtmetad Size: 512B - Virtual size: 128B

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 376B

33:00:00:05:4e:12:b9:0a:00:7b:12:49:99:00:00:00:00:05:4e
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

79:e2:46:e8:5c:fa:4f:fd:12:ba:60:08:e2:60:b5:a0:e4:22:af:48:1f:82:bf:41:10:44:20:a1:74:71:35:c9
Signer

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 757KB - Virtual size: 756KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 960B

.qtmetad
Size: 512B - Virtual size: 128B

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 376B