C:\Users\qt\work\qt\qttools\bin\pixeltool.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c3d4cd71ae207ea369025a9ae38a950N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c3d4cd71ae207ea369025a9ae38a950N.exe
Resource
win10v2004-20240802-en
General
-
Target
0c3d4cd71ae207ea369025a9ae38a950N.exe
-
Size
620KB
-
MD5
0c3d4cd71ae207ea369025a9ae38a950
-
SHA1
1e530b57dfb0e93b4f1e29707fdb94aeba9b2e79
-
SHA256
58dcab3490672c6d259594eb062749c3ec4d213df61ec1d145a3e97db93a9fd1
-
SHA512
420d978fc639dfdadcc989a121b79c4deeb828d3918459c2d6fb65255a27bdc3a5c8f2f523822e953902f9bdaa2b76d156dd1805f0d329f15f49f7cd03ff730c
-
SSDEEP
12288:298N71YoiqIpRNVJnLnFhRqppMjeBhvxGfOLxcBe:2WNOoiqcRJ/RBoqfOL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c3d4cd71ae207ea369025a9ae38a950N.exe
Files
-
0c3d4cd71ae207ea369025a9ae38a950N.exe.exe windows:6 windows x64 arch:x64
4d4fb42b8cbf4eb8b37408d229d30c24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
qt5widgets
??0QApplication@@QEAA@AEAHPEAPEADH@Z
?qt_metacall@QWidget@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QWidget@@UEAAPEAXPEBD@Z
?staticMetaObject@QWidget@@2UQMetaObject@@B
?staticMetaObject@QAction@@2UQMetaObject@@B
?wheelEvent@QWidget@@MEAAXPEAVQWheelEvent@@@Z
?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z
?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z
?sharedPainter@QWidget@@MEBAPEAVQPainter@@XZ
?setVisible@QWidget@@UEAAX_N@Z
?redirected@QWidget@@MEBAPEAVQPaintDevice@@PEAVQPoint@@@Z
?qt_metacast@QActionGroup@@UEAAPEAXPEBD@Z
?qt_metacall@QActionGroup@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?paintEngine@QWidget@@UEBAPEAVQPaintEngine@@XZ
?nativeEvent@QWidget@@MEAA_NAEBVQByteArray@@PEAXPEAJ@Z
?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ
?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z
?metaObject@QActionGroup@@UEBAPEBUQMetaObject@@XZ
?leaveEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z
?initPainter@QWidget@@MEBAXPEAVQPainter@@@Z
?hideEvent@QWidget@@MEAAXPEAVQHideEvent@@@Z
?heightForWidth@QWidget@@UEBAHH@Z
?hasHeightForWidth@QWidget@@UEBA_NXZ
?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?focusNextPrevChild@QWidget@@MEAA_N_N@Z
?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?event@QWidget@@MEAA_NPEAVQEvent@@@Z
?enterEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z
?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z
?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z
?devType@QWidget@@UEBAHXZ
?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z
?changeEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z
?exec@QMenu@@QEAAPEAVQAction@@AEBVQPoint@@PEAV2@@Z
?addSeparator@QMenu@@QEAAPEAVQAction@@XZ
?addAction@QMenu@@QEAAPEAVQAction@@AEBVQString@@@Z
??1QMenu@@UEAA@XZ
??0QMenu@@QEAA@PEAVQWidget@@@Z
??1QActionGroup@@UEAA@XZ
??0QActionGroup@@QEAA@PEAVQObject@@@Z
?triggered@QAction@@QEAAX_N@Z
?setEnabled@QAction@@QEAAX_N@Z
?setChecked@QAction@@QEAAX_N@Z
?isChecked@QAction@@QEBA_NXZ
?setCheckable@QAction@@QEAAX_N@Z
?setShortcut@QAction@@QEAAXAEBVQKeySequence@@@Z
?setActionGroup@QAction@@QEAAXPEAVQActionGroup@@@Z
?warning@QMessageBox@@SA?AW4StandardButton@1@PEAVQWidget@@AEBVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z
?setTextInteractionFlags@QMessageBox@@QEAAXV?$QFlags@W4TextInteractionFlag@Qt@@@@@Z
??1QMessageBox@@UEAA@XZ
??0QMessageBox@@QEAA@W4Icon@0@AEBVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@PEAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?setDefaultSuffix@QFileDialog@@QEAAXAEBVQString@@@Z
?setAcceptMode@QFileDialog@@QEAAXW4AcceptMode@1@@Z
?selectMimeTypeFilter@QFileDialog@@QEAAXAEBVQString@@@Z
?setMimeTypeFilters@QFileDialog@@QEAAXAEBVQStringList@@@Z
?selectedFiles@QFileDialog@@QEBA?AVQStringList@@XZ
?setDirectory@QFileDialog@@QEAAXAEBVQString@@@Z
??1QFileDialog@@UEAA@XZ
??0QFileDialog@@QEAA@PEAVQWidget@@AEBVQString@@11@Z
?exec@QDialog@@UEAAHXZ
?aboutQt@QApplication@@SAXXZ
?desktop@QApplication@@SAPEAVQDesktopWidget@@XZ
?screen@QWidget@@QEBAPEAVQScreen@@XZ
?windowHandle@QWidget@@QEBAPEAVQWindow@@XZ
?setAttribute@QWidget@@QEAAXW4WidgetAttribute@Qt@@_N@Z
?setWindowFlags@QWidget@@QEAAXV?$QFlags@W4WindowType@Qt@@@@@Z
?move@QWidget@@QEAAXAEBVQPoint@@@Z
?update@QWidget@@QEAAXXZ
?releaseKeyboard@QWidget@@QEAAXXZ
?grabKeyboard@QWidget@@QEAAXXZ
?setWindowTitle@QWidget@@QEAAXAEBVQString@@@Z
?palette@QWidget@@QEBAAEBVQPalette@@XZ
?mapToGlobal@QWidget@@QEBA?AVQPoint@@AEBV2@@Z
?size@QWidget@@QEBA?AVQSize@@XZ
?pos@QWidget@@QEBA?AVQPoint@@XZ
?winId@QWidget@@QEBA_KXZ
??1QWidget@@UEAA@XZ
??0QWidget@@QEAA@PEAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
?exec@QApplication@@SAHXZ
??1QApplication@@UEAA@XZ
?show@QWidget@@QEAAXXZ
qt5gui
??0QRegion@@QEAA@AEBVQRect@@W4RegionType@0@@Z
??1QRegion@@QEAA@XZ
?begin@QRegion@@QEBAPEBVQRect@@XZ
?rectCount@QRegion@@QEBAHXZ
??ZQRegion@@QEAAAEAV0@AEBV0@@Z
??0QImage@@QEAA@XZ
??0QImage@@QEAA@HHW4Format@0@@Z
??0QImage@@QEAA@$$QEAV0@@Z
??4QImage@@QEAAAEAV0@AEBV0@@Z
?format@QImage@@QEBA?AW4Format@1@XZ
?width@QImage@@QEBAHXZ
?height@QImage@@QEBAHXZ
?scanLine@QImage@@QEAAPEAEH@Z
?scanLine@QImage@@QEBAPEBEH@Z
?pixel@QImage@@QEBAIHH@Z
?convertToFormat_helper@QImage@@IEBA?AV1@W4Format@1@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?convertToFormat_inplace@QImage@@IEAA_NW4Format@1@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
??0QPixmap@@QEAA@XZ
??0QPixmap@@QEAA@HH@Z
??1QPixmap@@UEAA@XZ
??4QPixmap@@QEAAAEAV0@$$QEAV0@@Z
?rect@QPixmap@@QEBA?AVQRect@@XZ
?fill@QPixmap@@QEAAXAEBVQColor@@@Z
?toImage@QPixmap@@QEBA?AVQImage@@XZ
?fromImage@QPixmap@@SA?AV1@AEBVQImage@@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?save@QPixmap@@QEBA_NAEBVQString@@PEBDH@Z
?copy@QPixmap@@QEBA?AV1@AEBVQRect@@@Z
??0QBrush@@QEAA@AEBVQColor@@W4BrushStyle@Qt@@@Z
??0QBrush@@QEAA@W4GlobalColor@Qt@@W4BrushStyle@2@@Z
??0QBrush@@QEAA@AEBVQPixmap@@@Z
??1QBrush@@QEAA@XZ
?color@QBrush@@QEBAAEBVQColor@@XZ
?color@QPalette@@QEBAAEBVQColor@@W4ColorRole@1@@Z
??0QFont@@QEAA@AEBVQString@@HH_N@Z
??1QFont@@QEAA@XZ
?setWeight@QFont@@QEAAXH@Z
?pos@QCursor@@SA?AVQPoint@@XZ
??0QKeySequence@@QEAA@XZ
??0QKeySequence@@QEAA@HHHH@Z
??0QKeySequence@@QEAA@W4StandardKey@0@@Z
??1QKeySequence@@QEAA@XZ
?primaryScreen@QGuiApplication@@SAPEAVQScreen@@XZ
?screens@QGuiApplication@@SA?AV?$QList@PEAVQScreen@@@@XZ
?screenAt@QGuiApplication@@SAPEAVQScreen@@AEBVQPoint@@@Z
?clipboard@QGuiApplication@@SAPEAVQClipboard@@XZ
?name@QScreen@@QEBA?AVQString@@XZ
?depth@QScreen@@QEBAHXZ
?geometry@QScreen@@QEBA?AVQRect@@XZ
?logicalDotsPerInch@QScreen@@QEBANXZ
?devicePixelRatio@QScreen@@QEBANXZ
?availableGeometry@QScreen@@QEBA?AVQRect@@XZ
?grabWindow@QScreen@@QEAA?AVQPixmap@@_KHHHH@Z
?refreshRate@QScreen@@QEBANXZ
?setText@QClipboard@@QEAAXAEBVQString@@W4Mode@1@@Z
?setPixmap@QClipboard@@QEAAXAEBVQPixmap@@W4Mode@1@@Z
??0QPen@@QEAA@AEBVQBrush@@NW4PenStyle@Qt@@W4PenCapStyle@3@W4PenJoinStyle@3@@Z
??1QPen@@QEAA@XZ
??0QPainter@@QEAA@PEAVQPaintDevice@@@Z
??1QPainter@@QEAA@XZ
?end@QPainter@@QEAA_NXZ
?setFont@QPainter@@QEAAXAEBVQFont@@@Z
?setPen@QPainter@@QEAAXAEBVQColor@@@Z
?setPen@QPainter@@QEAAXAEBVQPen@@@Z
?setPen@QPainter@@QEAAXW4PenStyle@Qt@@@Z
?setBrush@QPainter@@QEAAXAEBVQBrush@@@Z
?setBrush@QPainter@@QEAAXW4BrushStyle@Qt@@@Z
?save@QPainter@@QEAAXXZ
?restore@QPainter@@QEAAXXZ
?scale@QPainter@@QEAAXNN@Z
?translate@QPainter@@QEAAXAEBVQPointF@@@Z
?drawLines@QPainter@@QEAAXPEBVQLine@@H@Z
?drawRects@QPainter@@QEAAXPEBVQRect@@H@Z
?drawPixmap@QPainter@@QEAAXAEBVQPointF@@AEBVQPixmap@@@Z
?drawImage@QPainter@@QEAAXHHAEBVQImage@@HHHHV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?drawText@QPainter@@QEAAXAEBVQRect@@HAEBVQString@@PEAV2@@Z
?fillRect@QPainter@@QEAAXAEBVQRect@@AEBVQBrush@@@Z
?fillRect@QPainter@@QEAAXAEBVQRect@@AEBVQColor@@@Z
?pos@QMouseEvent@@QEBA?AVQPoint@@XZ
?x@QMouseEvent@@QEBAHXZ
?y@QMouseEvent@@QEBAHXZ
?modifiers@QKeyEvent@@QEBA?AV?$QFlags@W4KeyboardModifier@Qt@@@@XZ
?supportedMimeTypes@QImageWriter@@SA?AV?$QList@VQByteArray@@@@XZ
?screen@QWindow@@QEBAPEAVQScreen@@XZ
?isActive@QHighDpiScaling@@SA_NXZ
?scaleAndOrigin@QHighDpiScaling@@SA?AUScaleAndOrigin@1@PEBVQScreen@@PEAVQPoint@@@Z
??0QColor@@QEAA@I@Z
??0QColor@@QEAA@HHHH@Z
??0QColor@@QEAA@W4GlobalColor@Qt@@@Z
?staticMetaObject@QGuiApplication@@2UQMetaObject@@B
?lastWindowClosed@QGuiApplication@@QEAAXXZ
?size@QImage@@QEBA?AVQSize@@XZ
??1QImage@@UEAA@XZ
??0QImage@@QEAA@AEBVQString@@PEBD@Z
??0QRegion@@QEAA@HHHHW4RegionType@0@@Z
?name@QColor@@QEBA?AVQString@@XZ
qt5core
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?shared_null@QListData@@2UData@1@B
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?noforcesign@Qt@@YAAEAVQTextStream@@AEAV2@@Z
?forcesign@Qt@@YAAEAVQTextStream@@AEAV2@@Z
??6QTextStream@@QEAAAEAV0@PEBD@Z
??6QTextStream@@QEAAAEAV0@AEBVQString@@@Z
??6QTextStream@@QEAAAEAV0@N@Z
??6QTextStream@@QEAAAEAV0@H@Z
??6QTextStream@@QEAAAEAV0@D@Z
??1QTextStream@@UEAA@XZ
??0QTextStream@@QEAA@PEAVQString@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?value@QSettings@@QEBA?AVQVariant@@AEBVQString@@AEBV2@@Z
?setValue@QSettings@@QEAAXAEBVQString@@AEBVQVariant@@@Z
??1QSettings@@UEAA@XZ
??0QSettings@@QEAA@AEBVQString@@0PEAVQObject@@@Z
?toNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z
?toSize@QVariant@@QEBA?AVQSize@@XZ
?toPoint@QVariant@@QEBA?AVQPoint@@XZ
?toBool@QVariant@@QEBA_NXZ
?toInt@QVariant@@QEBAHPEA_N@Z
??0QVariant@@QEAA@AEBVQPoint@@@Z
??0QVariant@@QEAA@AEBVQSize@@@Z
??0QVariant@@QEAA@H@Z
??1QVariant@@QEAA@XZ
?instance@QCoreApplication@@SAPEAV1@XZ
?applicationName@QCoreApplication@@SA?AVQString@@XZ
?intersects@QRect@@QEBA_NAEBV1@@Z
??UQRect@@QEBA?AV0@AEBV0@@Z
?center@QRect@@QEBA?AVQPoint@@XZ
?normalized@QRect@@QEBA?AV1@XZ
??0QRect@@QEAA@HHHH@Z
??0QRect@@QEAA@AEBVQPoint@@AEBVQSize@@@Z
?killTimer@QObject@@QEAAXH@Z
?startTimer@QObject@@QEAAHHW4TimerType@Qt@@@Z
?QStringList_contains@QtPrivate@@YA_NPEBVQStringList@@AEBVQString@@W4CaseSensitivity@Qt@@@Z
?append@QListData@@QEAAPEAPEAXXZ
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?number@QString@@SA?AV1@HH@Z
?fromLatin1@QString@@SA?AV1@AEBVQByteArray@@@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
?asprintf@QString@@SA?AV1@PEBDZZ
??1QByteArray@@QEAA@XZ
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?exists@QFileInfo@@QEBA_NXZ
??1QFileInfo@@QEAA@XZ
??0QFileInfo@@QEAA@AEBVQString@@@Z
?positionalArguments@QCommandLineParser@@QEBA?AVQStringList@@XZ
?process@QCommandLineParser@@QEAAXAEBVQCoreApplication@@@Z
?addPositionalArgument@QCommandLineParser@@QEAAXAEBVQString@@00@Z
?addHelpOption@QCommandLineParser@@QEAA?AVQCommandLineOption@@XZ
?addVersionOption@QCommandLineParser@@QEAA?AVQCommandLineOption@@XZ
?addOption@QCommandLineParser@@QEAA_NAEBVQCommandLineOption@@@Z
??1QCommandLineParser@@QEAA@XZ
??0QCommandLineParser@@QEAA@XZ
??1QCommandLineOption@@QEAA@XZ
??0QCommandLineOption@@QEAA@AEBVQString@@000@Z
?quit@QCoreApplication@@SAXXZ
?setApplicationVersion@QCoreApplication@@SAXAEBVQString@@@Z
?setApplicationName@QCoreApplication@@SAXAEBVQString@@@Z
?dispose@QListData@@SAXPEAUData@1@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@VQLatin1String@@@Z
??0QString@@QEAA@XZ
?qstrcmp@@YAHPEBD0@Z
??1Connection@QMetaObject@@QEAA@XZ
?setOrganizationName@QCoreApplication@@SAXAEBVQString@@@Z
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z
kernel32
WideCharToMultiByte
LocalFree
GetCommandLineW
RtlLookupFunctionEntry
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
vcruntime140
_CxxThrowException
memset
__std_exception_destroy
__C_specific_handler
__current_exception
__current_exception_context
__std_exception_copy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_register_thread_local_exe_atexit_callback
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_cexit
_register_onexit_function
_crt_atexit
terminate
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_seh_filter_exe
_exit
_c_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
shell32
CommandLineToArgvW
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE