ba5dce7b7fafbcd70536179df3a0b33d931c610724d11c950cb2d7dd8a2d1a9a_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ba5dce7b7fafbcd70536179df3a0b33d931c610724d11c950cb2d7dd8a2d1a9a_NeikiAnalytics.exe
Size

417KB
MD5

e11f1468a64d8fbbdf5024541514d790
SHA1

6a3fb4b37bc9934ad1103965053e90520002cb55
SHA256

ba5dce7b7fafbcd70536179df3a0b33d931c610724d11c950cb2d7dd8a2d1a9a
SHA512

82974b4f29deb6b42989fddd742d405ea0f43c8a707d816917e5e5a2e34020280a5ec66b715ff08d875a3bae6d5b0dd5c0ec4747a649cccd35261dbc81995e98
SSDEEP

6144:TCsfY0yQxW30LavuBMUqKhFHj4s8E7haNcgZz/LIO1xOEGWvhO9UCFVLeK:qnQxW30LamBMrowCFoK

Score

1^/10

Malware Config

Signatures

Files

ba5dce7b7fafbcd70536179df3a0b33d931c610724d11c950cb2d7dd8a2d1a9a_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

b2b803606b723859911d70f6510d209d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

28:05:95:1b:74:4e:7d:3f:9e:b4:ea:55:a0:0d:83:08
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

02/02/2022, 00:00

Not After

01/02/2025, 23:59

Subject

CN=CompuGroup Medical Deutschland AG,O=CompuGroup Medical Deutschland AG,ST=Rheinland-Pfalz,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:d9:6e:78:d7:fe:cf:84:63:12:4e:e5:65:0b:13:60:2b:41:41:14:51:f5:5e:26:27:69:2f:0d:22:be:69:e5
Signer

Actual PE Digest

fa:d9:6e:78:d7:fe:cf:84:63:12:4e:e5:65:0b:13:60:2b:41:41:14:51:f5:5e:26:27:69:2f:0d:22:be:69:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\_Source\jenkins\workspace\conan_build_medistar\hotfix\build\GA\msga\ga_bc9k\RelWithDebInfo\ga_bc9k.pdb

Imports

applib

?ps_extern_id@@YA?AVstrn@@XZ
?ps_pname@@3Vstrn@@A
?pname_color@@YA?AW4tcolor@@XZ
?tvz_name@@YA?AVstrn@@F_N@Z
?ps_berufGet@@YA?AVstrn@@_N@Z
?p7@@3Vstrn@@A
?p24@@3Vstrn@@A
?ps_teln@@3Vstrn@@A
?p11@@3Vstrn@@A
?ps_fbits@@3AADA
?p13@@3AAVstdi@@A
?cba128@@3VBArrayChar@@A
?p2@@3Vstrn@@A
?er@@3AAFA
?p10@@3Vstrn@@A
?p10_xlat@@YAXFAADAAFABVstrn@@@Z
?p22@@3Vstrn@@A
?ps_mdhid@@3Vstrn@@A
?dat@@3Vstrn@@A
?prx_mpa@@3ABFB
?prx_sel@@3ABFB
?pwcp@@YA?AVstrn@@F@Z
?getDocAccess@PatDataCache@@QAE_NF@Z
?hdds_ldf@@YAXAAVstrn@@F@Z
?is_vwdup@@YAFXZ
?ps_vwdup@@3Vstrn@@A
?cvl3b@@YAHABVstrn@@@Z
?applibVersion1@@3DA
?PC_ganbd@@3DA
??0SqlTableLocker@SqlAccess@@QAE@ABV?$BArray@Vstrn@@@@ABVstrn@@_N@Z
?valid@SqlTableLocker@SqlAccess@@QBE_NXZ
??1SqlTableLocker@SqlAccess@@QAE@XZ
?setMultiPraxEnabled@@YAXXZ
?psyncOpen@@YA_NXZ
?getCurrentPatPsync@@YAXFAAHAAF@Z
?ip_select_set_title@@YAXAAVstrn@@@Z
?ip_select@@YAF_N0ABVstrn@@1@Z
?maxpnr@@YA?BHXZ
?setNewPat@PatDataCache@@QAE_NHF_N@Z
?patAccess@PatDataCache@@QAEFFF_N@Z
?LST_Xnn@@YA?AW4GboIdentifier@@HW4Gebuehrenordnung@@@Z
??0LstKuerzelDatenSatz@@QAE@W4GboIdentifier@@H_N@Z
?select@LstKuerzelDatenSatz@@QAE_NABVstrn@@@Z
??1LstKuerzelDatenSatz@@UAE@XZ
?getLEintrag@LstKuerzelDatenSatz@@QBE?AVstrn@@XZ
?getDEintrag@LstKuerzelDatenSatz@@QBE?AVstrn@@XZ
?calcAge@@YA_NAAUAlterJMWT@@@Z
?translateZiff@@YAHAAVstrn@@UAlterJMWT@@_N@Z
?cpn@@3ABVExtendedPatNumber@@B
?ntv_name@@YA?AVstrn@@F_N00@Z
?zn_name@@YA?AVstrn@@F@Z
?tv_name@@YA?AVstrn@@F_N@Z
?ps_pgdat@@3Vstrn@@A
?ps_lkzPlzOrtGet@@YAABVstrn@@XZ
?ps_strasseLegacyGet@@YAABVstrn@@XZ
?getGeschlechtPatient@@YA?BVPersonGeschlecht@@XZ
?ps_vgdat@@3Vstrn@@A
?kkpat@@3ABVkkds@@B
?gebuehrenordnung@kkds@@QBE?AW4Gebuehrenordnung@@_N@Z
??0ClassifiedLineNumber@@QAE@XZ
??0ClassifiedLineNumber@@QAE@HW4MDBufferLineType@@@Z
?getLineType@ClassifiedLineNumber@@QBE?AW4MDBufferLineType@@XZ
??4ClassifiedLineNumber@@QAEAAV0@ABV0@@Z
?getLineNr@ClassifiedLineNumber@@QBEHXZ
?globalMDScanType@@3VMDScanType@@A
?setPoslo@MDScanType@@QAE_NABVClassifiedLineNumber@@@Z
??O@YA_NABVClassifiedLineNumber@@0@Z
?setPoshi@MDScanType@@QAE_NABVClassifiedLineNumber@@@Z
?scanDnIncLo@MDScanType@@QAEXXZ
?access@MDLineAccessSql@@QAEXABVClassifiedLineNumber@@@Z
?getText@MDLineAccessSql@@QBEXAAVstrn@@@Z
?globalMDScanDate@@3VMDScanDate@@A
?setPoslo@MDScanDate@@QAE_NABVClassifiedLineNumber@@@Z
?setPoshi@MDScanDate@@QAE_NABVClassifiedLineNumber@@@Z
?scanUpDecHi@MDScanDate@@QAEXXZ
?getKba@MDLineAccessSql@@QBEGXZ
?patDataClose@PatDataCache@@QAE_N_N@Z
?pdc@@3VPatDataCache@@A
?mdSortWrap@PatDataCache@@QAEXH@Z
?patDataSaveExplicit@PatDataCache@@QAE_N_N@Z
?fdz0@@3Vstrn@@A
?fdc0@@3Vstrn@@A
?setKba@MDLineAccessWriteSql@@QAEXH@Z
?packLine@MDLineAccessWriteSql@@QAEXABVstrn@@0@Z
?packLine@MDLineAccessWriteSql@@QAEXABVstrn@@@Z
?mdBuffer@@3AAVMDBufferSql@@A
?lineCountVisibleClassified@MDBufferSql@@QBE?AVClassifiedLineNumber@@W4MDBufferLineType@@@Z
??H@YA?AVClassifiedLineNumber@@ABV0@H@Z
?insert@MDLineAccessWriteSql@@QAEFVClassifiedLineNumber@@_N@Z
?globalMDLineAccess@@3VMDLineAccessWriteSql@@A
?md_typ_chk@@YAFD@Z
?md_tpx_chk@@YAFD@Z
?getSysProcess@@YAFXZ
?upgmUserName@@YA?AVstrn@@XZ
?prx_num@@3ABFB
?isCentralUserDB@UserAdministration@@YA_NXZ
?currentUserAccount@UserAdministration@@YA?AVUserAccountData@1@XZ
?getKuerzel@AdminAccountData@UserAdministration@@QBE?AVstrn@@XZ
??1UserAccountData@UserAdministration@@QAE@XZ
?getTitelVornameName@UserAccountData@UserAdministration@@QBE?AVstrn@@XZ
?getName@UserRoleData@UserAdministration@@QBE?AVstrn@@XZ
?getTeamId@UserRoleData@UserAdministration@@QBEHXZ
?teamName@UserAdministration@@YA?AVstrn@@H@Z
?isDataAccessLimited@@YA_NW4AccessDataType@UserAdministration@@_N@Z
?isPatientApprovalDAZRequested@@YA_NXZ
?isIgnoreDAZ@@YA_NXZ
?areMDTypesVisible@@YA_N_NABVstrn@@AAV1@@Z
?mdFilterNote@@YA_NAAVstrn@@W4MDFilterNoteMode@@@Z
?areOwnMDTypesWritable@@YA_NABVstrn@@AAV1@@Z
?currentRole@UserAdministration@@YA?AVUserRoleData@1@XZ
?canDoSystemLogin@UserRoleData@UserAdministration@@QBE_NXZ
??1UserRoleData@UserAdministration@@QAE@XZ
?isDataFilteringRequested@@YA_NXZ
?upgm_user_no@@YAFXZ
?fkt@@3Vstrn@@A
?prx_anz@@3ABFB
?calcSSW@@YA_NHAAF0AAH_N@Z
?tdatn@@3HA
?cic@@3Vstrn@@A
?stdPrinterOpen@@YAXAAVlprinter@@@Z
?stdPrinterClose@@YAXAAVlprinter@@@Z
?ci@@3AADA
?cb65@@3Vstrn@@A

qt3support4

?contentsRect@Q3Frame@@QBE?AVQRect@@XZ
??0Q3Frame@@QAE@PAVQWidget@@PBDV?$QFlags@W4WindowType@Qt@@@@@Z
?metaObject@Q3Frame@@UBEPBUQMetaObject@@XZ
?qt_metacast@Q3Frame@@UAEPAXPBD@Z
?qt_metacall@Q3Frame@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?paintEvent@Q3Frame@@MAEXPAVQPaintEvent@@@Z
?resizeEvent@Q3Frame@@MAEXPAVQResizeEvent@@@Z
?frameChanged@Q3Frame@@MAEXXZ
?drawFrame@Q3Frame@@MAEXPAVQPainter@@@Z
??1Q3Frame@@UAE@XZ

base

?date_time@@YAXAAVstrn@@@Z
?month_len@@YAFFF@Z
?init@dcu@@QAEXABVbcd@@W4currency_unit@@@Z
?value@dcu@@QBE?AVbcd@@W4currency_unit@@F@Z
?currency_sym@dcu@@QBEPBDXZ
?beep@@YAXXZ
?setWidgetBackgroundMode@@YAXPAVQWidget@@W4BackgroundMode@Qt@@@Z
??0MakroRekorder@@QAE@XZ
?BAddLastDialog@@YAXPAVQWidget@@@Z
??CMakroRekorder@@QAEPAVMakroRekorderInterface@@XZ
?BLastSubcontext@@YA?AVQString@@XZ
?BRemoveLastDialog@@YAXPAVQWidget@@@Z
??1MakroRekorder@@QAE@XZ
?msFromUniCode@@YAEG@Z
?msToUniCode@@YAGE@Z
?file_system_monitor@@YAXF@Z
?isdigit@@YAFD@Z
?nominal@dcu@@QBE?AVbcd@@XZ
?currency@dcu@@QBE?AW4currency_unit@@XZ
?currency_sym@@YAPBDW4currency_unit@@@Z
?cvs@@YA?AVstrn@@ABVbcd@@@Z
?fmt@@YA?AVstrn@@ABV1@H@Z
?bal_exit@@YAXF@Z
?large_chr@@YAEE@Z
??1comdevice@@QAE@XZ
??0comdevice@@QAE@XZ
??1isamfile@@QAE@XZ
??0isamfile@@QAE@XZ
??0blockfile@@QAE@XZ
??0filehandle@@QAE@XZ
?com_write@comdevice@@QAEXAAVBArrayChar@@HF@Z
?com_write@comdevice@@QAEXVConstCharPointer@@F@Z
?com_write@comdevice@@QAEXABVstrn@@@Z
?com_read@comdevice@@QAEXAAVBArrayChar@@HF@Z
?com_read@comdevice@@QAEXVCharPointer@@F@Z
?com_read@comdevice@@QAEXAAVstrn@@@Z
?com_disable@comdevice@@QAEXXZ
?com_connect@comdevice@@QAEXABUcom_pm@@@Z
?blk_write_eof@blockfile@@QAEXHVConstCharPointer@@F@Z
?blk_write@blockfile@@QAEXHAAVBArrayChar@@HF@Z
?blk_write@blockfile@@QAEXHVConstCharPointer@@F@Z
?blk_write@blockfile@@QAEXHABVstrn@@@Z
?blk_read@blockfile@@QAEXHAAVBArrayChar@@HF@Z
?blk_read@blockfile@@QAEXHVCharPointer@@F@Z
?blk_read@blockfile@@QAEXHAAVstrn@@@Z
?down@isamfile@@QAEXAAVBArrayChar@@HF@Z
?down@isamfile@@QAEXVCharPointer@@F@Z
?down@isamfile@@QAEXAAVstrn@@@Z
?up@isamfile@@QAEXAAVBArrayChar@@HF@Z
?up@isamfile@@QAEXVCharPointer@@F@Z
?up@isamfile@@QAEXAAVstrn@@@Z
?delet@isamfile@@QAEXVConstCharPointer@@@Z
?modif@isamfile@@QAEXVConstCharPointer@@AAVBArrayChar@@HF@Z
?modif@isamfile@@QAEXVConstCharPointer@@0F@Z
?modif@isamfile@@QAEXVConstCharPointer@@ABVstrn@@@Z
?search@isamfile@@QAEXVConstCharPointer@@AAVBArrayChar@@HF@Z
?search@isamfile@@QAEXVConstCharPointer@@VCharPointer@@F@Z
?search@isamfile@@QAEXVConstCharPointer@@AAVstrn@@@Z
?option_index@isamfile@@QAEXF@Z
?insert@isamfile@@QAEXVConstCharPointer@@AAVBArrayChar@@HF@Z
?insert@isamfile@@QAEXVConstCharPointer@@0F@Z
?insert@isamfile@@QAEXVConstCharPointer@@ABVstrn@@@Z
?cfile_var@isamfile@@QAEXFABVstrn@@FF@Z
?cfile_fix@isamfile@@QAEXFABVstrn@@FF@Z
?cfile@blockfile@@QAEXFABVstrn@@@Z
?fsizesec@blockfile@@QBEHXZ
?recsize@isamfile@@QAEFXZ
?keysize@isamfile@@QAEFXZ
?fname@filehandle@@QBE?AVstrn@@XZ
?isopen@filehandle@@QBEFXZ
?setmode@filehandle@@QAEXF@Z
?rename@isamfile@@QAEXABVstrn@@@Z
?rename@blockfile@@QAEXABVstrn@@@Z
?close_checked@filehandle@@QAEXXZ
?dfile@isamfile@@QAEXABVstrn@@@Z
?dfile@blockfile@@QAEXABVstrn@@@Z
?com_open@comdevice@@QAEXABVstrn@@@Z
?iopen@isamfile@@QAEXFABVstrn@@@Z
?bopen@blockfile@@QAEXFABVstrn@@@Z
?close_noerr@filehandle@@QAEXXZ
?get_dev_file@@YAFPBDAAUdev_file@@AAF2@Z
?seterr@filehandle@@QAEXF@Z
?fms_xstat@@3FA
?excFMS@@YAXXZ
?runProcess@@YA_NABVstrn@@0AAH0_N@Z
?set_ymd@@YAFHAAF0@Z
?move@@YAXVCharPointer@@0HH@Z
?ncdate@@YA?AVstrn@@ABV1@@Z
?cv_dat@@YAHABVstrn@@@Z
?qtan_of@@YAHH@Z
?qten_of@@YAHH@Z
?alter_j@@YAFABVstrn@@H@Z
?set_ymd@@YAFHAAF00@Z
?c10date@@YA?AVstrn@@ABV1@@Z
?baselibVersion1@@3DA
?dat_ymd@@YAHFFF@Z
?ARGS@@YA?AVstrn@@H@Z
?excFMSnz@@YAFXZ
?aa_okbox@@YAXPBDPAVMsgBoxExtension@@@Z
?getGeschlechtOhneUXD@PersonGeschlecht@@QBE?BDXZ
??1PersonGeschlecht@@QAE@XZ
??9@YA_NABVbcd@@H@Z
?setERR@@YAXF@Z
??0BProgressDialogView@@QAE@XZ
?setWindowTitle@BProgressDialogView@@QAEXABVstrn@@@Z
?setAbortButton@BProgressDialogView@@QAEX_N0@Z
?setTextInfoWidth@BProgressDialogView@@QAEXH@Z
?setTextInfo@BProgressDialogView@@UAEXABVstrn@@_N@Z
?show@BProgressDialogView@@UAEXXZ
?hide@BProgressDialogView@@QAEXXZ
??1BProgressDialogView@@QAE@XZ
?aa_okbox@@YAXABVstrn@@PAVMsgBoxExtension@@@Z
?enlarge@BArrayInt@@QAE_NHH@Z
??RBArrayInt@@QBEABHH@Z
??1BArrayInt@@QAE@XZ
??0BArrayInt@@QAE@QBDH@Z
??_7BFormAssistantModel@@6B@
??0BFormAssistant@@QAE@XZ
?setModel@BFormAssistant@@AAEXPAVBFormAssistantModel@@@Z
??1BFormAssistant@@QAE@XZ
??1BFormAssistantModel@@UAE@XZ
?setEditHelpText@BFormAssistant@@AAEXPBD@Z
?exec@BFormAssistant@@QAE_NAAVQDialog@@_NW4ResizeDialog@@2HH@Z
?BLastDialog@@YAPAVQWidget@@XZ
?baseClass@@YAPAVQAbstractButton@@PAVQPushButton@@@Z
?newBPushButtonController@@YAPAVBPushButtonController@@PAVBFormAssistant@@PAVQAbstractButton@@PAVBAbstractSlotVoidBool@@@Z
?setWidgetAutoFillBackground@@YAXPAVQWidget@@@Z
?newBLineEditController@@YAPAVBLineEditController@@PAVBFormAssistant@@PAVQLineEdit@@AAVstrn@@W4EditType@BLineEditEnum@@HPAVBAbstractSlotBoolBool@@PAVQAbstractButton@@PAVAutocompleteInterface@@@Z
?close@BFormAssistant@@QAEXPAVQDialog@@P82@AEXH@ZPAVQCloseEvent@@@Z
?escape@BFormAssistant@@QAEXPAVQDialog@@P82@AEXH@Z@Z
?accept@BFormAssistant@@QAEXPAVQDialog@@P82@AEXH@Z@Z
?doSpecialKeyAccelAction@@YA_NPAVQKeyEvent@@@Z
?invalidateModel@BFormAssistant@@QAEXXZ
?setIcons@BFormAssistantModel@@UAEXXZ
?updateView@BFormAssistantModel@@UAEXH@Z
?processClose@BFormAssistantModel@@UAE?AW4ExitCode@1@_N@Z
?processOk@BFormAssistantModel@@UAE?AW4ExitCode@1@XZ
?acceptCancel@BFormAssistantModel@@UAE_NXZ
?substr@@YA?AVstrn@@ABV1@F@Z
??0inputfile@@QAE@XZ
??0outputfile@@QAE@XZ
??1filehandle@@QAE@XZ
?sfopen@inputfile@@QAEXABVstrn@@@Z
?clrERR@@YAFXZ
?sfread@inputfile@@QAEFAAVstrn@@@Z
?close@inputfile@@QAEXXZ
?sfopen@outputfile@@QAEXABVstrn@@@Z
?sfwrite@outputfile@@QAEXABVstrn@@@Z
?close_checked@outputfile@@QAEXXZ
??1inputfile@@QAE@XZ
??1outputfile@@QAE@XZ
??1blockfile@@QAE@XZ
?gener@@YA?AVstrn@@FABV1@@Z
?ncdate@@YA?AVstrn@@H@Z
?sys_process@@3FA
?system_time@@YA?AVstrn@@XZ
?cv_date10@@YAHABVstrn@@@Z
?dt_add@@YAHHF@Z
?c10date@@YA?AVstrn@@H@Z
?get_os_filename@@YAFAAVstrn@@ABV1@@Z
??Bstrn@@QBE?AVQString@@XZ
?stripBlanks@strn@@QBE?AV1@XZ
??0strn@@QAE@XZ
?space@@YA?AVstrn@@F@Z
??RBArrayInt@@QAEAAHH@Z
?move_inc@@YAXPADPBDH@Z
?messageBox@@YAFABVstrn@@PBD0PAVQWidget@@PAVMsgBoxExtension@@H@Z
??0bcd@@QAE@F@Z
??4bcd@@QAEAAV0@H@Z
??4bcd@@QAEAAV0@F@Z
?left@@YA?AVstrn@@PBDF@Z
?fmt@@YA?AVstrn@@ABV1@ABVbcd@@@Z
?includ@@YAXAAVstrn@@FPBDF@Z
?breakout@@3AB_NB
?includ@@YAXAAVstrn@@FABV1@F@Z
?cvi@bcd@@QBEFXZ
?index@strn@@QBEFABV1@F@Z
??1BArrayShort@@QAE@XZ
??0BArrayShort@@QAE@QBDH@Z
??0BArrayChar@@QAE@QBDH@Z
??RBArrayChar@@QAEAADH@Z
?shr@@YAXAAVstrn@@ABV1@@Z
??RBArrayShort@@QAEAAFH@Z
?int_swap@@YAFF@Z
??1BArrayBcd@@QAE@XZ
??0BArrayBcd@@QAE@PADFF@Z
?includ@@YAXAAVstrn@@FPBD@Z
?cvs@@YA?AVstrn@@PBD@Z
?cvb@@YA?AVbcd@@ABVstrn@@@Z
??1bcd@@QAE@XZ
??O@YA_NABVbcd@@H@Z
??RBArrayBcd@@QAEAAVbcd@@F@Z
??4bcd@@QAEAAV0@ABV0@@Z
?len@@YAFPBD@Z
?gener@@YA?AVstrn@@FPBD@Z
?cvl@bcd@@QBEHXZ
??1BArrayChar@@QAE@XZ
??0BArrayChar@@QAE@QBDPADH@Z
??1BArrayStrn@@QAE@XZ
??0BArrayStrn@@QAE@PADFF@Z
??0strn@@QAE@PADF_N@Z
??0strn@@QAE@ABV0@@Z
??0strn@@QAE@PBD@Z
?lprint@@3Vlprinter@@A
??Rlprinter@@QAEAAV0@W4tpcontrol@@@Z
??Rlprinter@@QAEAAV0@ABVstrn@@@Z
??Rlprinter@@QAEAAV0@PBD@Z
?shr@@YA?AVstrn@@ABV1@@Z
??9@YA_NABVstrn@@0@Z
?large@@YA?AVstrn@@ABV1@@Z
?wait_100ms@@YAXF@Z
?system_date@@YAHXZ
?c8date@@YA?AVstrn@@H@Z
?index@@YAFPBDABVstrn@@@Z
??9@YA_NABVstrn@@PBD@Z
??RBArrayStrn@@QAEAAVstrn@@F@Z
??8@YA_NABVstrn@@0@Z
?fmt@@YA?AVstrn@@PBDH@Z
??G@YA?AVstrn@@PBDABV0@@Z
??G@YA?AVstrn@@ABV0@0@Z
??0strn@@QAE@H@Z
?shl@@YA?AVstrn@@ABV1@@Z
?substr@@YA?AVstrn@@ABV1@FF@Z
?includ@@YAXAAVstrn@@FABV1@@Z
?clrs@@YAXAAVstrn@@@Z
?cvs@@YA?AVstrn@@H@Z
??4strn@@QAEAAV0@PBD@Z
?left@@YA?AVstrn@@ABV1@F@Z
??G@YA?AVstrn@@ABV0@PBD@Z
?chr@@YA?AVstrn@@F@Z
??4strn@@QAEAAV0@ABV0@@Z
??1strn@@QAE@XZ
??8@YA_NABVstrn@@PBD@Z
?index@strn@@QBEFPBDF@Z
?cvl@strn@@QBEHXZ
?cvi@strn@@QBEFXZ
?len@strn@@QBEFXZ
?strchr@strn@@QBEDF@Z
?substr@@YA?AVstrn@@PBDFF@Z

qtgui4

?layout@QLayout@@UAEPAV1@XZ
?spacerItem@QLayoutItem@@UAEPAVQSpacerItem@@XZ
?metaObject@QHBoxLayout@@UBEPBUQMetaObject@@XZ
?qt_metacast@QHBoxLayout@@UAEPAXPBD@Z
?qt_metacall@QHBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?addItem@QBoxLayout@@UAEXPAVQLayoutItem@@@Z
?itemAt@QBoxLayout@@UBEPAVQLayoutItem@@H@Z
?takeAt@QBoxLayout@@UAEPAVQLayoutItem@@H@Z
?count@QBoxLayout@@UBEHXZ
?sizeHint@QBoxLayout@@UBE?AVQSize@@XZ
?minimumSize@QBoxLayout@@UBE?AVQSize@@XZ
?maximumSize@QBoxLayout@@UBE?AVQSize@@XZ
?expandingDirections@QBoxLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?widget@QLayoutItem@@UAEPAVQWidget@@XZ
?hasHeightForWidth@QBoxLayout@@UBE_NXZ
?heightForWidth@QBoxLayout@@UBEHH@Z
?minimumHeightForWidth@QBoxLayout@@UBEHH@Z
?invalidate@QBoxLayout@@UAEXXZ
?metaObject@QLabel@@UBEPBUQMetaObject@@XZ
?qt_metacast@QLabel@@UAEPAXPBD@Z
?qt_metacall@QLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?event@QLabel@@MAE_NPAVQEvent@@@Z
?setVisible@QWidget@@UAEX_N@Z
?sizeHint@QLabel@@UBE?AVQSize@@XZ
?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ
?heightForWidth@QLabel@@UBEHH@Z
?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?invalidate@QGridLayout@@UAEXXZ
?minimumHeightForWidth@QGridLayout@@UBEHH@Z
?heightForWidth@QGridLayout@@UBEHH@Z
?hasHeightForWidth@QGridLayout@@UBE_NXZ
?isEmpty@QLayout@@UBE_NXZ
?geometry@QLayout@@UBE?AVQRect@@XZ
?setGeometry@QGridLayout@@UAEXABVQRect@@@Z
?expandingDirections@QGridLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?maximumSize@QGridLayout@@UBE?AVQSize@@XZ
??1QKeySequence@@QAE@XZ
?setShortcut@QAbstractButton@@QAEXABVQKeySequence@@@Z
??0QKeySequence@@QAE@ABVQString@@@Z
?setText@QAbstractButton@@QAEXABVQString@@@Z
?setText@QLabel@@QAEXABVQString@@@Z
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
??1QDialog@@UAE@XZ
?event@QWidget@@MAE_NPAVQEvent@@@Z
?eventFilter@QDialog@@MAE_NPAVQObject@@PAVQEvent@@@Z
?setVisible@QDialog@@UAEX_N@Z
?sizeHint@QDialog@@UBE?AVQSize@@XZ
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?heightForWidth@QWidget@@UBEHH@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?resizeEvent@QDialog@@MAEXPAVQResizeEvent@@@Z
?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?showEvent@QDialog@@MAEXPAVQShowEvent@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?winEvent@QWidget@@MAE_NPAUtagMSG@@PAJ@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?styleChange@QWidget@@MAEXAAVQStyle@@@Z
?enabledChange@QWidget@@MAEX_N@Z
?paletteChange@QWidget@@MAEXABVQPalette@@@Z
?fontChange@QWidget@@MAEXABVQFont@@@Z
?windowActivationChange@QWidget@@MAEX_N@Z
?done@QDialog@@UAEXH@Z
?accept@QDialog@@UAEXXZ
?reject@QDialog@@UAEXXZ
?devType@QWidget@@UBEHXZ
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?getDC@QWidget@@UBEPAUHDC__@@XZ
?releaseDC@QWidget@@UBEXPAUHDC__@@@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?addWidget@QGridLayout@@QAEXPAVQWidget@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?setMaxLength@QLineEdit@@QAEXH@Z
??0QLineEdit@@QAE@PAVQWidget@@@Z
?addItem@QGridLayout@@QAEXPAVQLayoutItem@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
??0QSpacerItem@@QAE@HHW4Policy@QSizePolicy@@0@Z
?addLayout@QGridLayout@@QAEXPAVQLayout@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
??0QPushButton@@QAE@PAVQWidget@@@Z
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?setWordWrap@QLabel@@QAEX_N@Z
?setFrameShadow@QFrame@@QAEXW4Shadow@1@@Z
?setFrameShape@QFrame@@QAEXW4Shape@1@@Z
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?setSpacing@QBoxLayout@@QAEXH@Z
??0QHBoxLayout@@QAE@XZ
?setContentsMargins@QLayout@@QAEXHHHH@Z
?setSpacing@QGridLayout@@QAEXH@Z
??0QGridLayout@@QAE@PAVQWidget@@@Z
?resize@QWidget@@QAEXABVQSize@@@Z
?metaObject@QGridLayout@@UBEPBUQMetaObject@@XZ
?qt_metacast@QGridLayout@@UAEPAXPBD@Z
?qt_metacall@QGridLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?childEvent@QLayout@@MAEXPAVQChildEvent@@@Z
?addItem@QGridLayout@@MAEXPAVQLayoutItem@@@Z
?itemAt@QGridLayout@@UBEPAVQLayoutItem@@H@Z
?takeAt@QGridLayout@@UAEPAVQLayoutItem@@H@Z
?indexOf@QLayout@@UBEHPAVQWidget@@@Z
?count@QGridLayout@@UBEHXZ
?sizeHint@QGridLayout@@UBE?AVQSize@@XZ
?setGeometry@QBoxLayout@@UAEXABVQRect@@@Z
??0QColor@@QAE@XZ
??0QFont@@QAE@XZ
??0QFont@@QAE@ABVQString@@HH_N@Z
??4QFont@@QAEAAV0@ABV0@@Z
??1QFont@@QAE@XZ
?setPixelSize@QFont@@QAEXH@Z
?setFont@QWidget@@QAEXABVQFont@@@Z
?setFocusPolicy@QWidget@@QAEXW4FocusPolicy@Qt@@@Z
?setFrameStyle@QFrame@@QAEXH@Z
?setLineWidth@QFrame@@QAEXH@Z
?changeEvent@QFrame@@MAEXPAVQEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?sizeHint@QFrame@@UBE?AVQSize@@XZ
?event@QFrame@@MAE_NPAVQEvent@@@Z
?setFixedSize@QWidget@@QAEXHH@Z
?exec@QDialog@@QAEHXZ
?state@QKeyEvent@@QBEHXZ
?text@QKeyEvent@@QBE?AVQString@@XZ
?hide@QWidget@@QAEXXZ
?setGeometry@QWidget@@QAEXABVQRect@@@Z
?show@QWidget@@QAEXXZ
?x@QWidget@@QBEHXZ
?y@QWidget@@QBEHXZ
?repaint@QWidget@@QAEXXZ
??0QPixmap@@QAE@ABVQSize@@@Z
??0QPainter@@QAE@PAVQPaintDevice@@@Z
?font@QPainter@@QBEABVQFont@@XZ
?setFont@QPainter@@QAEXABVQFont@@@Z
?setBackgroundMode@QPainter@@QAEXW4BGMode@Qt@@@Z
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z
?setBackground@QPainter@@QAEXABVQBrush@@@Z
??1QBrush@@QAE@XZ
?setPen@QPainter@@QAEXABVQColor@@@Z
?drawText@QPainter@@QAEXHHABVQString@@H@Z
?drawPixmap@QPainter@@QAEXABVQPointF@@ABVQPixmap@@@Z
??1QPainter@@QAE@XZ
??1QPixmap@@UAE@XZ
?setRgb@QColor@@QAEXHHHH@Z
?staticMetaObject@QDialog@@2UQMetaObject@@B
?qt_metacall@QDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QDialog@@UAEPAXPBD@Z
??0QDialog@@QAE@PAVQWidget@@PBD_NV?$QFlags@W4WindowType@Qt@@@@@Z
??1QLineEdit@@UAE@XZ
??1QPushButton@@UAE@XZ
??1QLabel@@UAE@XZ
??1QHBoxLayout@@UAE@XZ
??1QGridLayout@@UAE@XZ
??1QLayoutItem@@UAE@XZ
?inputMethodQuery@QLineEdit@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QLineEdit@@MAEXPAVQInputMethodEvent@@@Z
?changeEvent@QLineEdit@@MAEXPAVQEvent@@@Z
?dropEvent@QLineEdit@@MAEXPAVQDropEvent@@@Z
?dragLeaveEvent@QLineEdit@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QLineEdit@@MAEXPAVQDragMoveEvent@@@Z
?dragEnterEvent@QLineEdit@@MAEXPAVQDragEnterEvent@@@Z
?contextMenuEvent@QLineEdit@@MAEXPAVQContextMenuEvent@@@Z
?paintEvent@QLineEdit@@MAEXPAVQPaintEvent@@@Z
?focusOutEvent@QLineEdit@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLineEdit@@MAEXPAVQFocusEvent@@@Z
?keyPressEvent@QLineEdit@@MAEXPAVQKeyEvent@@@Z
?mouseMoveEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QLineEdit@@UBE?AVQSize@@XZ
?sizeHint@QLineEdit@@UBE?AVQSize@@XZ
?event@QLineEdit@@UAE_NPAVQEvent@@@Z
?qt_metacall@QLineEdit@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QLineEdit@@UAEPAXPBD@Z
?metaObject@QLineEdit@@UBEPBUQMetaObject@@XZ
?spacerItem@QSpacerItem@@UAEPAV1@XZ
?layout@QLayoutItem@@UAEPAVQLayout@@XZ
?invalidate@QLayoutItem@@UAEXXZ
?minimumHeightForWidth@QLayoutItem@@UBEHH@Z
?heightForWidth@QLayoutItem@@UBEHH@Z
?hasHeightForWidth@QLayoutItem@@UBE_NXZ
?isEmpty@QSpacerItem@@UBE_NXZ
?geometry@QSpacerItem@@UBE?AVQRect@@XZ
?setGeometry@QSpacerItem@@UAEXABVQRect@@@Z
?expandingDirections@QSpacerItem@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?maximumSize@QSpacerItem@@UBE?AVQSize@@XZ
?minimumSize@QSpacerItem@@UBE?AVQSize@@XZ
?sizeHint@QSpacerItem@@UBE?AVQSize@@XZ
?nextCheckState@QAbstractButton@@MAEXXZ
?checkStateSet@QAbstractButton@@MAEXXZ
?hitButton@QAbstractButton@@MBE_NABVQPoint@@@Z
?changeEvent@QAbstractButton@@MAEXPAVQEvent@@@Z
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?paintEvent@QPushButton@@MAEXPAVQPaintEvent@@@Z
?focusOutEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?keyReleaseEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QPushButton@@MAEXPAVQKeyEvent@@@Z
?mouseMoveEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QPushButton@@UBE?AVQSize@@XZ
?sizeHint@QPushButton@@UBE?AVQSize@@XZ
?timerEvent@QAbstractButton@@MAEXPAVQTimerEvent@@@Z
?event@QPushButton@@MAE_NPAVQEvent@@@Z
?qt_metacall@QPushButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QPushButton@@UAEPAXPBD@Z
?metaObject@QPushButton@@UBEPBUQMetaObject@@XZ
?languageChange@QWidget@@MAEXXZ
?focusNextPrevChild@QLabel@@MAE_N_N@Z
?changeEvent@QLabel@@MAEXPAVQEvent@@@Z
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?paintEvent@QLabel@@MAEXPAVQPaintEvent@@@Z
?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?keyPressEvent@QLabel@@MAEXPAVQKeyEvent@@@Z
?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?minimumSize@QGridLayout@@UBE?AVQSize@@XZ

qtcore4

?start@QTimer@@QAEHH_N@Z
?singleShot@QTimer@@SAXHPAVQObject@@PBD@Z
?processOneEvent@QCoreApplication@@SAXXZ
?at@QString@@QBE?BVQChar@@H@Z
??0QString@@QAE@VQChar@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?objectName@QObject@@QBE?AVQString@@XZ
?fromUtf8@QString@@SA?AV1@PBDH@Z
?setObjectName@QObject@@QAEXABVQString@@@Z
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00W4Encoding@1@@Z
?append@QListData@@QAEPAPAXXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?qFree@@YAXPAX@Z
?setFileName@QFile@@QAEXABVQString@@@Z
?shared_null@QListData@@2UData@1@A
?getChar@QIODevice@@QAE_NPAD@Z
??0QFile@@QAE@XZ
?shared_null@QString@@0UData@1@A
??1QFile@@UAE@XZ
??0QString@@QAE@ABV0@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?free@QString@@CAXPAUData@1@@Z
??0QTimer@@QAE@PAVQObject@@@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?metaObject@QTimer@@UBEPBUQMetaObject@@XZ
?qt_metacast@QTimer@@UAEPAXPBD@Z
?qt_metacall@QTimer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?timerEvent@QTimer@@MAEXPAVQTimerEvent@@@Z
??1QTimer@@UAE@XZ
?processEvents@QCoreApplication@@SAXV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
?hasPendingEvents@QCoreApplication@@SA_NXZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
??1QString@@QAE@XZ

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??_U@YAPAXI@Z
free
malloc
??2@YAPAXI@Z
_purecall
_CxxThrowException
??3@YAXPAX@Z
memset
__CxxFrameHandler3

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

?moduleFunction@@YAHPBD@Z

Sections

.text
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2b803606b723859911d70f6510d209d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

28:05:95:1b:74:4e:7d:3f:9e:b4:ea:55:a0:0d:83:08Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

fa:d9:6e:78:d7:fe:cf:84:63:12:4e:e5:65:0b:13:60:2b:41:41:14:51:f5:5e:26:27:69:2f:0d:22:be:69:e5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

applib

qt3support4

base

qtgui4

qtcore4

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 281KB - Virtual size: 281KB

.rdata Size: 49KB - Virtual size: 48KB

.data Size: 3KB - Virtual size: 28KB

.idata Size: 36KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 30KB - Virtual size: 30KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

28:05:95:1b:74:4e:7d:3f:9e:b4:ea:55:a0:0d:83:08
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

fa:d9:6e:78:d7:fe:cf:84:63:12:4e:e5:65:0b:13:60:2b:41:41:14:51:f5:5e:26:27:69:2f:0d:22:be:69:e5
Signer

.text
Size: 281KB - Virtual size: 281KB

.rdata
Size: 49KB - Virtual size: 48KB

.data
Size: 3KB - Virtual size: 28KB

.idata
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 30KB - Virtual size: 30KB