ea666d3b1beaaf069e5fb7fe6907d090N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ea666d3b1beaaf069e5fb7fe6907d090N.exe
Size

2.6MB
MD5

ea666d3b1beaaf069e5fb7fe6907d090
SHA1

83d1ce27129e672dd98b17dcde76c13f6db1eed5
SHA256

7b99fd27e8277a60389f4d8fb90e3f9a804c59c68e25e4421b84d9889dc38b42
SHA512

c38bc4080a6e0978251b964d897dcdac73e693500b97bbe418090f75063284f56cf84d54f297bb580d06ad3fd2bfd9b2dfef1ee869d8937129213dbd39ac7f53
SSDEEP

49152:AXZU9al6LOv6LSZUR564N2rMrK7AT2Cj6GoG2rPd7855:WZU9al6LOiLSV4N2UT26DoG2rPo

Score

1^/10

Malware Config

Signatures

Files

ea666d3b1beaaf069e5fb7fe6907d090N.exe
.exe windows:4 windows x86 arch:x86

2874c86b15219646a61e335694b68ab7

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e4:f4:a8:fe:68:8e:66:da:31:32:72:5a:e1:06:20:46
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27-07-2016 00:00

Not After

27-07-2019 23:59

Subject

CN=EduIQ.com Damjan Kriznik s.p.,O=EduIQ.com Damjan Kriznik s.p.,POSTALCODE=2288,STREET=Slovenja vas 2D,L=HAJDINA,ST=HAJDINA,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:f4:a8:fe:68:8e:66:da:31:32:72:5a:e1:06:20:46
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27-07-2016 00:00

Not After

27-07-2019 23:59

Subject

CN=EduIQ.com Damjan Kriznik s.p.,O=EduIQ.com Damjan Kriznik s.p.,POSTALCODE=2288,STREET=Slovenja vas 2D,L=HAJDINA,ST=HAJDINA,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0d:ed:79:8f:79:dc:67:e2:14:3b:2b:34:a0:a5:fd:b0:59:d9:8d:12:36:00:04:de:1f:0c:5c:6c:82:c3:78:a6
Signer

Actual PE Digest

0d:ed:79:8f:79:dc:67:e2:14:3b:2b:34:a0:a5:fd:b0:59:d9:8d:12:36:00:04:de:1f:0c:5c:6c:82:c3:78:a6

Digest Algorithm

sha256

PE Digest Matches

true

18:ee:b3:9c:84:86:1e:5a:20:35:5d:f4:2f:9e:63:a3:c6:f3:2e:60
Signer

Actual PE Digest

18:ee:b3:9c:84:86:1e:5a:20:35:5d:f4:2f:9e:63:a3:c6:f3:2e:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qtsolutions_service-head

_ZN13QtServiceBase14processCommandEi
_ZN13QtServiceBase14setStartupTypeEN19QtServiceController11StartupTypeE
_ZN13QtServiceBase15setServiceFlagsE6QFlagsINS_11ServiceFlagEE
_ZN13QtServiceBase4execEv
_ZN13QtServiceBase4stopEv
_ZN13QtServiceBase5pauseEv
_ZN13QtServiceBase6resumeEv
_ZN13QtServiceBaseC2EiPPcRK7QString
_ZN13QtServiceBaseD2Ev

qt5core

_Z4endlR11QTextStream
_Z5qHashRK7QStringj
_Z7qgetenvPKc
_Z9qBadAllocv
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEjjj6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray5clearEv
_ZN10QByteArray6appendEPKc
_ZN10QByteArray6appendEPKci
_ZN10QByteArray6appendERKS_
_ZN10QByteArray6appendEc
_ZN10QByteArray6resizeEi
_ZN10QByteArray7fromHexERKS_
_ZN10QByteArrayC1EPKci
_ZN10QByteArrayaSERKS_
_ZN10QSemaphore10tryAcquireEii
_ZN10QSemaphore7releaseEi
_ZN10QSemaphoreC1Ei
_ZN10QSemaphoreD1Ev
_ZN11QFileDevice5closeEv
_ZN11QJsonObject14fromVariantMapERK4QMapI7QString8QVariantE
_ZN11QJsonObjectD1Ev
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject12invokeMethodEP7QObjectPKcN2Qt14ConnectionTypeE22QGenericReturnArgument16QGenericArgumentS7_S7_S7_S7_S7_S7_S7_S7_S7_
_ZN11QMetaObject14normalizedTypeEPKc
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStream5flushEv
_ZN11QTextStream7readAllEv
_ZN11QTextStream9setDeviceEP9QIODevice
_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamC1Ev
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN12QMapDataBase10createDataEv
_ZN12QMapDataBase10createNodeEiiP12QMapNodeBaseb
_ZN12QMapDataBase11shared_nullE
_ZN12QMapDataBase18recalcMostLeftNodeEv
_ZN12QMapDataBase20freeNodeAndRebalanceEP12QMapNodeBase
_ZN12QMapDataBase8freeDataEPS_
_ZN12QMapDataBase8freeTreeEP12QMapNodeBasei
_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError
_ZN13QJsonDocumentC1ERK11QJsonObject
_ZN13QJsonDocumentD1Ev
_ZN14QStandardPaths16writableLocationENS_16StandardLocationE
_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication19applicationFilePathEv
_ZN16QCoreApplication4execEv
_ZN16QCoreApplication4selfE
_ZN16QCoreApplicationC1ERiPPci
_ZN16QCoreApplicationD1Ev
_ZN16QStringListModel13setStringListERK11QStringList
_ZN16QStringListModel16staticMetaObjectE
_ZN16QStringListModelC1EP7QObject
_ZN18QAbstractItemModel10insertRowsEiiRK11QModelIndex
_ZN18QAbstractItemModel10removeRowsEiiRK11QModelIndex
_ZN18QAbstractItemModel11dataChangedERK11QModelIndexS2_RK7QVectorIiE
_ZN18QAbstractItemModel11moveColumnsERK11QModelIndexiiS2_i
_ZN18QAbstractItemModel11setItemDataERK11QModelIndexRK4QMapIi8QVariantE
_ZN18QAbstractItemModel13endInsertRowsEv
_ZN18QAbstractItemModel13endResetModelEv
_ZN18QAbstractItemModel13insertColumnsEiiRK11QModelIndex
_ZN18QAbstractItemModel13removeColumnsEiiRK11QModelIndex
_ZN18QAbstractItemModel13setHeaderDataEiN2Qt11OrientationERK8QVarianti
_ZN18QAbstractItemModel15beginInsertRowsERK11QModelIndexii
_ZN18QAbstractItemModel15beginResetModelEv
_ZN18QAbstractItemModel4sortEiN2Qt9SortOrderE
_ZN18QAbstractItemModel6revertEv
_ZN18QAbstractItemModel6submitEv
_ZN18QAbstractItemModel7setDataERK11QModelIndexRK8QVarianti
_ZN18QAbstractItemModel8moveRowsERK11QModelIndexiiS2_i
_ZN18QAbstractItemModel9fetchMoreERK11QModelIndex
_ZN18QAbstractListModel11qt_metacallEN11QMetaObject4CallEiPPv
_ZN18QAbstractListModel11qt_metacastEPKc
_ZN18QAbstractListModel12dropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex
_ZN18QAbstractListModel16staticMetaObjectE
_ZN18QAbstractListModelC2EP7QObject
_ZN18QAbstractListModelD2Ev
_ZN18QCryptographicHash4hashERK10QByteArrayNS_9AlgorithmE
_ZN4QDir14setNameFiltersERK11QStringList
_ZN4QDir2cdERK7QString
_ZN4QDir6removeERK7QString
_ZN4QDir9setFilterE6QFlagsINS_6FilterEE
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN4QDiraSERK7QString
_ZN4QDiraSERKS_
_ZN5QDate10fromStringERK7QStringS2_
_ZN5QDate11currentDateEv
_ZN5QFile11setFileNameERK7QString
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile6existsERK7QString
_ZN5QFile6removeERK7QString
_ZN5QFileC1ERK7QString
_ZN5QFileC1Ev
_ZN5QFileD1Ev
_ZN5QTime11currentTimeEv
_ZN5QUuid10createUuidEv
_ZN6QDebug9putStringEPK5QCharj
_ZN6QDebugD1Ev
_ZN6QMutex4lockEv
_ZN6QMutex6unlockEv
_ZN6QMutexC1ENS_13RecursionModeE
_ZN6QMutexD1Ev
_ZN6QTimer10singleShotEiPK7QObjectPKc
_ZN6QTimer11setIntervalEi
_ZN6QTimer4stopEv
_ZN6QTimer5startEi
_ZN6QTimer5startEv
_ZN6QTimerC1EP7QObject
_ZN6QTimerD1Ev
_ZN7QBuffer4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN7QBuffer4seekEx
_ZN7QBuffer5closeEv
_ZN7QBuffer7setDataERK10QByteArray
_ZN7QBufferC1EP10QByteArrayP7QObject
_ZN7QBufferC1EP7QObject
_ZN7QBufferD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10disconnectEPKS_PKcS1_S3_
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject11setPropertyEPKcRK8QVariant
_ZN7QObject12blockSignalsEb
_ZN7QObject12moveToThreadEP7QThread
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObject9setParentEPS_
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QRegExp3capEi
_ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE
_ZN7QRegExpD1Ev
_ZN7QString11reallocDataEjb
_ZN7QString13toUtf8_helperERKS_
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString14toLower_helperERKS_
_ZN7QString14toUpper_helperERS_
_ZN7QString14trimmed_helperERKS_
_ZN7QString14trimmed_helperERS_
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString15toLatin1_helperERKS_
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QString6numberEii
_ZN7QString6numberEji
_ZN7QString6numberEmi
_ZN7QString6numberExi
_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE
_ZN7QString7sprintfEPKcz
_ZN7QString9fromUtf16EPKti
_ZN7QStringC1E5QChar
_ZN7QStringC1EPK5QChari
_ZN7QStringaSERKS_
_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QThread11qt_metacastEPKc
_ZN7QThread13currentThreadEv
_ZN7QThread16staticMetaObjectE
_ZN7QThread19requestInterruptionEv
_ZN7QThread4execEv
_ZN7QThread4quitEv
_ZN7QThread4waitEm
_ZN7QThread5eventEP6QEvent
_ZN7QThread5sleepEm
_ZN7QThread5startENS_8PriorityE
_ZN7QThread6msleepEm
_ZN7QThreadC2EP7QObject
_ZN7QThreadD2Ev
_ZN8QProcess15waitForFinishedEi
_ZN8QProcess20readAllStandardErrorEv
_ZN8QProcess21readAllStandardOutputEv
_ZN8QVariantC1EPKc
_ZN8QVariantC1ERK10QByteArray
_ZN8QVariantC1ERK5QListIS_E
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1ERK9QDateTime
_ZN8QVariantC1ERKS_
_ZN8QVariantC1Eb
_ZN8QVariantC1Ed
_ZN8QVariantC1Ei
_ZN8QVariantC1EiPKvj
_ZN8QVariantC1Ej
_ZN8QVariantC1Ex
_ZN8QVariantD1Ev
_ZN8QVariantaSERKS_
_ZN9QDateTime10fromStringERK7QStringS2_
_ZN9QDateTime15currentDateTimeEv
_ZN9QDateTime22currentMSecsSinceEpochEv
_ZN9QDateTimeD1Ev
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QHashData11free_helperEPFvPNS_4NodeEE
_ZN9QHashData11shared_nullE
_ZN9QHashData12allocateNodeEi
_ZN9QHashData12previousNodeEPNS_4NodeE
_ZN9QHashData13detach_helperEPFvPNS_4NodeEPvEPFvS1_Eii
_ZN9QHashData6rehashEi
_ZN9QHashData8freeNodeEPv
_ZN9QHashData8nextNodeEPNS_4NodeE
_ZN9QIODevice4readEPcx
_ZN9QIODevice4readEx
_ZN9QIODevice5writeEPKcx
_ZN9QIODevice7readAllEv
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData6removeEi
_ZN9QListData7disposeEPNS_4DataE
_ZN9QListData7reallocEi
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_S3_PKvEi6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZN9QMetaType25registerConverterFunctionEPKN9QtPrivate25AbstractConverterFunctionEii
_ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayi
_ZN9QMetaType27unregisterConverterFunctionEii
_ZN9QMetaType30hasRegisteredConverterFunctionEii
_ZN9QMetaType8typeNameEi
_ZN9QSettings8setValueERK7QStringRK8QVariant
_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject
_ZN9QSettingsD1Ev
_ZN9QtPrivate16QStringList_joinEPK11QStringListPK5QChari
_ZN9QtPrivate20QStringList_containsEPK11QStringListRK7QStringN2Qt15CaseSensitivityE
_ZNK10QByteArray4leftEi
_ZNK10QByteArray5toHexEv
_ZNK10QByteArray6isNullEv
_ZNK10QByteArray8endsWithEc
_ZNK10QByteArray8toBase64Ev
_ZNK10QSemaphore9availableEv
_ZNK11QJsonObject12toVariantMapEv
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QMetaObject9classNameEv
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK12QMapNodeBase8nextNodeEv
_ZNK13QJsonDocument6objectEv
_ZNK13QJsonDocument6toJsonENS_10JsonFormatE
_ZNK14QMessageLogger5debugEv
_ZNK16QStringListModel10stringListEv
_ZNK18QAbstractItemModel10headerDataEiN2Qt11OrientationEi
_ZNK18QAbstractItemModel12canFetchMoreERK11QModelIndex
_ZNK18QAbstractItemModel15canDropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex
_ZNK18QAbstractItemModel20supportedDragActionsEv
_ZNK18QAbstractItemModel20supportedDropActionsEv
_ZNK18QAbstractItemModel4spanERK11QModelIndex
_ZNK18QAbstractItemModel5buddyERK11QModelIndex
_ZNK18QAbstractItemModel5matchERK11QModelIndexiRK8QVarianti6QFlagsIN2Qt9MatchFlagEE
_ZNK18QAbstractItemModel8itemDataERK11QModelIndex
_ZNK18QAbstractItemModel8mimeDataERK5QListI11QModelIndexE
_ZNK18QAbstractItemModel9mimeTypesEv
_ZNK18QAbstractListModel10metaObjectEv
_ZNK18QAbstractListModel11columnCountERK11QModelIndex
_ZNK18QAbstractListModel11hasChildrenERK11QModelIndex
_ZNK18QAbstractListModel5flagsERK11QModelIndex
_ZNK18QAbstractListModel5indexEiiRK11QModelIndex
_ZNK18QAbstractListModel6parentERK11QModelIndex
_ZNK18QAbstractListModel7siblingEiiRK11QModelIndex
_ZNK4QDir12absolutePathEv
_ZNK4QDir6mkpathERK7QString
_ZNK4QDir9entryListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK5QDate7addDaysEx
_ZNK5QTime8toStringEN2Qt10DateFormatE
_ZNK5QUuid8toStringEv
_ZNK5QUuid9toRfc4122Ev
_ZNK7QObject8propertyEPKc
_ZNK7QRegExp7indexInERK7QStringiNS_9CaretModeE
_ZNK7QString3argERKS_i5QChar
_ZNK7QString3argEdici5QChar
_ZNK7QString3midEii
_ZNK7QString4leftEi
_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString5toIntEPbi
_ZNK7QString5utf16Ev
_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE
_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QThread10metaObjectEv
_ZNK7QThread23isInterruptionRequestedEv
_ZNK7QThread9isRunningEv
_ZNK8QProcess5stateEv
_ZNK8QVariant10toLongLongEPb
_ZNK8QVariant3cmpERKS_
_ZNK8QVariant5toIntEPb
_ZNK8QVariant6toListEv
_ZNK8QVariant8toDoubleEPb
_ZNK8QVariant8toStringEv
_ZNK9QDateTime7addDaysEx
_ZNK9QDateTime8toStringERK7QString
_ZNK9QFileInfo12absolutePathEv
_ZNK9QFileInfo8fileNameEv
_ZNK9QSettings5valueERK7QStringRK8QVariant
_ZTV16QStringListModel
_ZeqRK7QStringS1_
_ZltRK7QStringS1_

qt5gui

_Z21qt_pixmapFromWinHICONP7HICON__
_ZN13QStandardItemC1ERK7QString
_ZN18QStandardItemModel11setRowCountEi
_ZN18QStandardItemModel14setColumnCountEi
_ZN18QStandardItemModel23setHorizontalHeaderItemEiP13QStandardItem
_ZN18QStandardItemModel7setItemEiiP13QStandardItem
_ZN7QPixmapC1ERKS_
_ZN7QPixmapC1Ev
_ZN7QPixmapD1Ev
_ZN7QPixmapaSERKS_
_ZNK7QPixmap4saveEP9QIODevicePKci
_ZNK7QPixmap6isNullEv

qt5network

_ZN10QTcpServer5closeEv
_ZN10QTcpServer6listenERK12QHostAddresst
_ZN10QTcpServerC1EP7QObject
_ZN10QTcpSocketC1EP7QObject
_ZN10QUdpSocket12readDatagramEPcxP12QHostAddressPt
_ZN10QUdpSocket13writeDatagramEPKcxRK12QHostAddresst
_ZN10QUdpSocketC1EP7QObject
_ZN10QUdpSocketD1Ev
_ZN12QHostAddressC1ENS_14SpecialAddressE
_ZN12QHostAddressC1ERK7QString
_ZN12QHostAddressC1Ev
_ZN12QHostAddressD1Ev
_ZN12QLocalServer16setSocketOptionsE6QFlagsINS_12SocketOptionEE
_ZN12QLocalServer5closeEv
_ZN12QLocalServer6listenERK7QString
_ZN12QLocalServerC1EP7QObject
_ZN12QLocalSocket15connectToServerERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN12QLocalSocket5flushEv
_ZN12QLocalSocketC1EP7QObject
_ZN15QAbstractSocket16staticMetaObjectE
_ZN15QAbstractSocket5flushEv
_ZN17QNetworkInterface12allAddressesEv
_ZN17QNetworkInterface13allInterfacesEv
_ZN17QNetworkInterfaceC1Ev
_ZN17QNetworkInterfaceD1Ev
_ZN20QNetworkAddressEntryD1Ev
_ZN9QHostInfo13localHostNameEv
_ZN9QHostInfo15localDomainNameEv
_ZNK10QUdpSocket19hasPendingDatagramsEv
_ZNK10QUdpSocket19pendingDatagramSizeEv
_ZNK12QHostAddress10isLoopbackEv
_ZNK12QHostAddress8protocolEv
_ZNK12QHostAddress8toStringEv
_ZNK12QLocalSocket5stateEv
_ZNK15QAbstractSocket11peerAddressEv
_ZNK15QAbstractSocket5stateEv
_ZNK17QNetworkInterface14addressEntriesEv
_ZNK17QNetworkInterface15hardwareAddressEv
_ZNK17QNetworkInterface4nameEv
_ZNK17QNetworkInterface5flagsEv
_ZNK20QNetworkAddressEntry2ipEv

qt5sql

_ZN12QSqlDatabase11addDatabaseERK7QStringS2_
_ZN12QSqlDatabase11setPasswordERK7QString
_ZN12QSqlDatabase15setDatabaseNameERK7QString
_ZN12QSqlDatabase17setConnectOptionsERK7QString
_ZN12QSqlDatabase4openEv
_ZN12QSqlDatabaseC1ERKS_
_ZN12QSqlDatabaseC1Ev
_ZN12QSqlDatabaseD1Ev
_ZN12QSqlDatabaseaSERKS_
_ZN14QSqlQueryModel8setQueryERK7QStringRK12QSqlDatabase
_ZN14QSqlQueryModelC1EP7QObject
_ZN14QSqlQueryModelD1Ev
_ZN9QSqlQuery4execERK7QString
_ZN9QSqlQuery4execEv
_ZN9QSqlQuery7prepareERK7QString
_ZN9QSqlQuery9bindValueERK7QStringRK8QVariant6QFlagsIN4QSql13ParamTypeFlagEE
_ZN9QSqlQueryC1E12QSqlDatabase
_ZN9QSqlQueryD1Ev

qt5xml

_ZN11QDomElement12setAttributeERK7QStringS2_
_ZN11QDomElement12setAttributeERK7QStringx
_ZN11QDomElementC1ERKS_
_ZN12QDomDocument10setContentERK10QByteArrayP7QStringPiS5_
_ZN12QDomDocument10setContentERK7QStringPS0_PiS4_
_ZN12QDomDocument13createElementERK7QString
_ZN12QDomDocumentC1Ev
_ZN12QDomDocumentD1Ev
_ZN12QDomNodeListD1Ev
_ZN8QDomNode11appendChildERKS_
_ZN8QDomNodeD1Ev
_ZN8QDomNodeD2Ev
_ZNK11QDomElement9attributeERK7QStringS2_
_ZNK12QDomDocument15documentElementEv
_ZNK12QDomDocument17elementsByTagNameERK7QString
_ZNK12QDomDocument8toStringEi
_ZNK12QDomNodeList4itemEi
_ZNK12QDomNodeList6lengthEv
_ZNK8QDomNode13ownerDocumentEv
_ZNK8QDomNode6isNullEv
_ZNK8QDomNode9toElementEv

advapi32

AdjustTokenPrivileges
ChangeServiceConfigW
CloseServiceHandle
ControlService
ConvertSidToStringSidA
ConvertStringSidToSidW
CopySid
CreateProcessAsUserW
DeleteService
DuplicateTokenEx
EnumServicesStatusW
GetLengthSid
GetTokenInformation
ImpersonateLoggedOnUser
InitializeAcl
InitializeSecurityDescriptor
LookupAccountNameW
LookupAccountSidW
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RevertToSelf
SetSecurityDescriptorDacl
SetSecurityInfo
SetTokenInformation
StartServiceW

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__divdi3
__register_frame_info
__udivdi3
__umoddi3

kernel32

CloseHandle
CreatePipe
CreateProcessW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GetVersionExW
GlobalAlloc
GlobalFree
GlobalMemoryStatus
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
Module32FirstW
Module32NextW
OpenProcess
OutputDebugStringW
PeekNamedPipe
Process32FirstW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
RaiseException
ReadFile
ReadProcessMemory
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
Thread32First
Thread32Next
TlsGetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock

mpr

WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_exit
_fmode
_initterm
_iob
_lock
_onexit
_snwprintf
_unlock
abort
calloc
exit
fprintf
free
fwprintf
fwrite
gmtime
malloc
memcmp
memmove
memset
memcpy
raise
rand
signal
strcmp
strlen
strncmp
time
tolower
vfprintf
wcscpy

netapi32

NetApiBufferFree
NetUserGetGroups
NetUserGetLocalGroups

psapi

EnumProcesses
GetModuleFileNameExW

shell32

ExtractIconExW
SHGetFolderPathW

user32

AttachThreadInput
DestroyIcon
EnumWindows
GetCaretPos
GetClassLongW
GetClassNameW
GetCursorPos
GetFocus
GetForegroundWindow
GetInputState
GetMessagePos
GetMessageTime
GetWindowTextW
GetWindowThreadProcessId
IsWindowVisible
MessageBoxW
PostMessageW
SendMessageW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

htonl
htons
ntohl
ntohs

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory
WTSQuerySessionInformationW
WTSQueryUserToken

libstdc++-6

_ZNKSt11logic_error4whatEv
_ZNKSt13runtime_error4whatEv
_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4findEPKcjj
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4findEcj
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6substrEjj
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareEPKc
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareERKS4_
_ZNKSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEE3strEv
_ZNKSt9exception4whatEv
_ZNSi4readEPci
_ZNSi5seekgExSt12_Ios_Seekdir
_ZNSo5writeEPKci
_ZNSo9_M_insertImEERSoT_
_ZNSolsEi
_ZNSt11logic_errorC1EPKc
_ZNSt11logic_errorC2ERKS_
_ZNSt11logic_errorD1Ev
_ZNSt11range_errorC1EPKc
_ZNSt11range_errorD1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev
_ZNSt13runtime_errorC1EPKc
_ZNSt13runtime_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt13runtime_errorC1ERKS_
_ZNSt13runtime_errorC2EPKc
_ZNSt13runtime_errorC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt13runtime_errorC2ERKS_
_ZNSt13runtime_errorD1Ev
_ZNSt13runtime_errorD2Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED0Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEED0Ev
_ZNSt16invalid_argumentC1EPKc
_ZNSt16invalid_argumentC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt16invalid_argumentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt16invalid_argumentD1Ev
_ZNSt16invalid_argumentD2Ev
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEjjPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructEjc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE14_M_replace_auxEjjjc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4swapERS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6assignEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7reserveEj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERjj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_mutateEjjPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9push_backEc
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE6resizeEjw
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEC1ESt13_Ios_Openmode
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9bad_allocD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZNSt9exceptionD2Ev
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt16__throw_bad_castv
_ZSt17__throw_bad_allocv
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZSt7getlineIcSt11char_traitsIcESaIcEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EES4_
_ZSt9terminatev
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZTTNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTTSt14basic_ofstreamIcSt11char_traitsIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVSt14basic_ofstreamIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt16invalid_argument
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_allocate_exception
__cxa_begin_catch
__cxa_end_catch
__cxa_free_exception
__cxa_get_exception_ptr
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw
__dynamic_cast
__gxx_personality_v0

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2874c86b15219646a61e335694b68ab7

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

e4:f4:a8:fe:68:8e:66:da:31:32:72:5a:e1:06:20:46Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

e4:f4:a8:fe:68:8e:66:da:31:32:72:5a:e1:06:20:46Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

0d:ed:79:8f:79:dc:67:e2:14:3b:2b:34:a0:a5:fd:b0:59:d9:8d:12:36:00:04:de:1f:0c:5c:6c:82:c3:78:a6Signer

18:ee:b3:9c:84:86:1e:5a:20:35:5d:f4:2f:9e:63:a3:c6:f3:2e:60Signer

Headers

File Characteristics

Imports

qtsolutions_service-head

qt5core

qt5gui

qt5network

qt5sql

qt5xml

advapi32

libgcc_s_dw2-1

kernel32

mpr

msvcrt

netapi32

psapi

shell32

user32

userenv

version

ws2_32

wtsapi32

libstdc++-6

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 245KB - Virtual size: 245KB

.eh_fram Size: 256KB - Virtual size: 256KB

.bss Size: - Virtual size: 1KB

.idata Size: 31KB - Virtual size: 31KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

e4:f4:a8:fe:68:8e:66:da:31:32:72:5a:e1:06:20:46
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

e4:f4:a8:fe:68:8e:66:da:31:32:72:5a:e1:06:20:46
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

0d:ed:79:8f:79:dc:67:e2:14:3b:2b:34:a0:a5:fd:b0:59:d9:8d:12:36:00:04:de:1f:0c:5c:6c:82:c3:78:a6
Signer

18:ee:b3:9c:84:86:1e:5a:20:35:5d:f4:2f:9e:63:a3:c6:f3:2e:60
Signer

.text
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 245KB - Virtual size: 245KB

.eh_fram
Size: 256KB - Virtual size: 256KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 31KB - Virtual size: 31KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B