cb6e4f80ae4e948a4671b24d68b7a7c4a2f63c5a454b3e85839da2725de4d8d5N

Sharing

Copy URL Twitter E-mail

General

Target

cb6e4f80ae4e948a4671b24d68b7a7c4a2f63c5a454b3e85839da2725de4d8d5N
Size

385KB
MD5

79dff78e838625c5766f2f7af2a3fe90
SHA1

59ccb3f2aeb185df8e9fbb86b493723b368f4364
SHA256

cb6e4f80ae4e948a4671b24d68b7a7c4a2f63c5a454b3e85839da2725de4d8d5
SHA512

86e6c03a58d3c936fdf774937454759a11c55395f0fb649d47a1c0b2fc1808a05be74ed3432a16a6ff6d55217b33bdc364dc3268ddff20fdff93968b8d0bd007
SSDEEP

3072:cNkl+RT28Lz/OK+GTxn08peEoVgVs6L2cEJNQ7LzVCLVtjtV:lq28Lz/OK+wMXVgb6NezkJvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb6e4f80ae4e948a4671b24d68b7a7c4a2f63c5a454b3e85839da2725de4d8d5N

Files

cb6e4f80ae4e948a4671b24d68b7a7c4a2f63c5a454b3e85839da2725de4d8d5N
.dll windows:5 windows x86 arch:x86

02c378f237b334d8de3653a5422be7ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

qtgui4

?scaled@QImage@@QBE?AV1@HHW4AspectRatioMode@Qt@@W4TransformationMode@3@@Z
?convertToFormat@QImage@@QBE?AV1@W4Format@1@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?hasAlphaChannel@QImage@@QBE_NXZ
?createAlphaMask@QImage@@QBE?AV1@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?fill@QImage@@QAEXI@Z
?setPixel@QImage@@QAEXHHI@Z
?invertPixels@QImage@@QAEXW4InvertMode@1@@Z
?fromData@QImage@@SA?AV1@ABVQByteArray@@PBD@Z
??0QImage@@QAE@HHW4Format@0@@Z
?isNull@QImage@@QBE_NXZ
?width@QImage@@QBEHXZ
?setAlphaChannel@QImage@@QAEXABV1@@Z
?metric@QImage@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?releaseDC@QPaintDevice@@UBEXPAUHDC__@@@Z
?getDC@QPaintDevice@@UBEPAUHDC__@@XZ
?paintEngine@QImage@@UBEPAVQPaintEngine@@XZ
?devType@QImage@@UBEHXZ
??0QImage@@QAE@ABV0@@Z
?setFormat@QImageIOHandler@@QBEXABVQByteArray@@@Z
?device@QImageIOHandler@@QBEPAVQIODevice@@XZ
?currentImageRect@QImageIOHandler@@UBE?AVQRect@@XZ
?currentImageNumber@QImageIOHandler@@UBEHXZ
?nextImageDelay@QImageIOHandler@@UBEHXZ
?loopCount@QImageIOHandler@@UBEHXZ
?setOption@QImageIOHandler@@UAEXW4ImageOption@1@ABVQVariant@@@Z
??0QImageIOHandler@@QAE@XZ
?setDevice@QImageIOHandler@@QAEXPAVQIODevice@@@Z
??1QImageIOHandler@@UAE@XZ
?height@QImage@@QBEHXZ
?bytesPerLine@QImage@@QBEHXZ
?scanLine@QImage@@QAEPAEH@Z
?setColorCount@QImage@@QAEXH@Z
?setColor@QImage@@QAEXHI@Z
??0QImage@@QAE@XZ
??4QImage@@QAEAAV0@ABV0@@Z
??1QImage@@UAE@XZ
??1QImageIOPlugin@@UAE@XZ
?qt_metacall@QImageIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QImageIOPlugin@@UAEPAXPBD@Z
?metaObject@QImageIOPlugin@@UBEPBUQMetaObject@@XZ
??0QImageIOPlugin@@QAE@PAVQObject@@@Z
?setFormat@QImageIOHandler@@QAEXABVQByteArray@@@Z

qtcore4

??0QByteArray@@QAE@XZ
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?shared_null@QListData@@2UData@1@A
?removeGuard@QMetaObject@@SAXPAPAVQObject@@@Z
?changeGuard@QMetaObject@@SAXPAPAVQObject@@PAV2@@Z
??0QString@@QAE@ABV0@@Z
?free@QString@@CAXPAUData@1@@Z
?isWritable@QIODevice@@QBE_NXZ
?isReadable@QIODevice@@QBE_NXZ
?isOpen@QIODevice@@QBE_NXZ
?qFree@@YAXPAX@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?append@QListData@@QAEPAPAXXZ
??1QString@@QAE@XZ
?fromLatin1_helper@QString@@CAPAUData@1@PBDH@Z
?read@QIODevice@@QAE_JPAD_J@Z
?ungetChar@QIODevice@@QAEXD@Z
?qBadAlloc@@YAXXZ
??1QByteArray@@QAE@XZ
??0QVariant@@QAE@XZ
??0QVariant@@QAE@ABVQSize@@@Z
?qWarning@@YAXPBDZZ
??0QByteArray@@QAE@PBD@Z
?qMemCopy@@YAPAXPAXPBXI@Z
?read@QIODevice@@QAE?AVQByteArray@@_J@Z
?fromRawData@QByteArray@@SA?AV1@PBDH@Z
?write@QIODevice@@QAE_JPBD_J@Z
??1QBuffer@@UAE@XZ
?open@QBuffer@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QBuffer@@QAE@PAVQByteArray@@PAVQObject@@@Z

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memset
??_V@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

qt_plugin_instance
qt_plugin_query_verification_data

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

02c378f237b334d8de3653a5422be7ce

Headers

File Characteristics

Imports

qtgui4

qtcore4

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text Size: 357KB - Virtual size: 360KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 357KB - Virtual size: 360KB