WordPress site hacked, alle images show spam

Hopefully I’m posting this in the correct section…

I’ve got a wordpress website that’s been hacked. Instead of the images that are supposed to show up I only get spam: https://www.rdcnl.nl

I’m pretty sure there must be bad code in the database somewhere because I cleaned up the entire folder and installed a new version of wordpress through filezilla but the spam is stil showing.

The site has been handed to me in this state: without a database backup, so if this problem is unfixable I will have to delete the entire site and just build a new from scratch…

I’ve already come the conslusion that there’s a high change of me having to do that. But maybe someone encountered a similar problem and can help me with this?

I’ve tried looking in de.sql file that I got when exporting my database but I’m really not sure what to look out for….