qt_plugin_instance
qt_plugin_query_metadata
Static task
static1
Behavioral task
behavioral1
Sample
a3223d6a526c384e8faec99c65a452a0_NEIKI.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a3223d6a526c384e8faec99c65a452a0_NEIKI.dll
Resource
win10v2004-20240426-en
Target
a3223d6a526c384e8faec99c65a452a0_NEIKI
Size
380KB
MD5
a3223d6a526c384e8faec99c65a452a0
SHA1
a06aab2c9bd2d124bd933421359f67f279392487
SHA256
ac84a9665993685643d6457bc46fc3d741a9d06f4d9c52b15d7dc9e3f94c68c0
SHA512
a597cef29800daf6e77c4a4096267b9e98cc1f3d93d3f75af970a8249d2b2ceb575ab553be5660bdd460410f0b0412ba8f1a158320cac234f9694a08c134681c
SSDEEP
6144:aSV0K0PSsRSwHyweeAceX7EEEEEEIijKCFIhYWHQzhC3WOpT1Z:aK0nSD+ywee2hKCFcX5
Checks for missing Authenticode signature.
resource |
---|
a3223d6a526c384e8faec99c65a452a0_NEIKI |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
?nextImageDelay@QImageIOHandler@@UEBAHXZ
?name@QImageIOHandler@@UEBA?AVQByteArray@@XZ
?loopCount@QImageIOHandler@@UEBAHXZ
?currentImageRect@QImageIOHandler@@UEBA?AVQRect@@XZ
?convertToFormat_inplace@QImage@@IEAA_NW4Format@1@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?convertToFormat_helper@QImage@@IEBA?AV1@W4Format@1@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?setDotsPerMeterY@QImage@@QEAAXH@Z
?setDotsPerMeterX@QImage@@QEAAXH@Z
?dotsPerMeterY@QImage@@QEBAHXZ
?dotsPerMeterX@QImage@@QEBAHXZ
?setColorSpace@QImage@@QEAAXAEBVQColorSpace@@@Z
?hasAlphaChannel@QImage@@QEBA_NXZ
?setColorTable@QImage@@QEAAXV?$QVector@I@@@Z
?colorTable@QImage@@QEBA?AV?$QVector@I@@XZ
?bytesPerLine@QImage@@QEBAHXZ
?staticMetaObject@QImageIOPlugin@@2UQMetaObject@@B
?constScanLine@QImage@@QEBAPEBEH@Z
?scanLine@QImage@@QEBAPEBEH@Z
?scanLine@QImage@@QEAAPEAEH@Z
?sizeInBytes@QImage@@QEBA_JXZ
?bits@QImage@@QEAAPEAEXZ
?depth@QImage@@QEBAHXZ
?size@QImage@@QEBA?AVQSize@@XZ
?height@QImage@@QEBAHXZ
?width@QImage@@QEBAHXZ
?reinterpretAsFormat@QImage@@QEAA_NW4Format@1@@Z
?format@QImage@@QEBA?AW4Format@1@XZ
?copy@QImage@@QEBA?AV1@AEBVQRect@@@Z
?isNull@QImage@@QEBA_NXZ
??4QImage@@QEAAAEAV0@$$QEAV0@@Z
??1QImage@@UEAA@XZ
??0QImage@@QEAA@$$QEAV0@@Z
??0QImage@@QEAA@AEBVQSize@@W4Format@0@@Z
?logicalDpiY@QPaintDevice@@QEBAHXZ
?logicalDpiX@QPaintDevice@@QEBAHXZ
?iccProfile@QColorSpace@@QEBA?AVQByteArray@@XZ
?fromIccProfile@QColorSpace@@SA?AV1@AEBVQByteArray@@@Z
?isValid@QColorSpace@@QEBA_NXZ
??1QColorSpace@@QEAA@XZ
?setFormat@QImageIOHandler@@QEBAXAEBVQByteArray@@@Z
?device@QImageIOHandler@@QEBAPEAVQIODevice@@XZ
??1QImageIOHandler@@UEAA@XZ
??0QImageIOHandler@@QEAA@XZ
??1QImageIOPlugin@@UEAA@XZ
??0QImageIOPlugin@@QEAA@PEAVQObject@@@Z
?qt_metacall@QImageIOPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QImageIOPlugin@@UEAAPEAXPEBD@Z
?setFormat@QImageIOHandler@@QEAAXAEBVQByteArray@@@Z
?setDevice@QImageIOHandler@@QEAAXPEAVQIODevice@@@Z
?colorSpace@QImage@@QEBA?AVQColorSpace@@XZ
z_inflateInit_
z_deflateInit_
z_inflateReset
z_deflateParams
z_deflateReset
??0QMessageLogger@@QEAA@PEBDH0@Z
z_inflate
z_deflateEnd
z_deflate
?shared_null@QArrayData@@2QBU1@B
?toInt@QVariant@@QEBAHPEA_N@Z
z_inflateEnd
?qstrcmp@@YAHAEBVQByteArray@@PEBD@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?isOpen@QIODevice@@QEBA_NXZ
?isReadable@QIODevice@@QEBA_NXZ
?isWritable@QIODevice@@QEBA_NXZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?type@QVariant@@QEBA?AW4Type@1@XZ
?warning@QMessageLogger@@QEBAXPEBDZZ
?allocate@QArrayData@@SAPEAU1@_K00V?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPEAU1@_K1@Z
??0QByteArray@@QEAA@PEBDH@Z
??1QByteArray@@QEAA@XZ
?constData@QByteArray@@QEBAPEBDXZ
?read@QIODevice@@QEAA_JPEAD_J@Z
?write@QIODevice@@QEAA_JPEBD_J@Z
?peek@QIODevice@@QEAA_JPEAD_J@Z
??0QVariant@@QEAA@XZ
??0QVariant@@QEAA@H@Z
??0QVariant@@QEAA@AEBVQSize@@@Z
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitializeSListHead
memcpy
memset
memmove
memcmp
__C_specific_handler
__std_terminate
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
calloc
malloc
free
_callnewh
realloc
floor
pow
sqrt
atan2
exp
log
strcmp
strncmp
__stdio_common_vfprintf
__stdio_common_vsprintf
__acrt_iob_func
bsearch
qsort
rand
atoi
getenv
_crt_atexit
_initterm_e
_initterm
_cexit
_execute_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
qt_plugin_instance
qt_plugin_query_metadata
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ