46b1ececb230d51a20f1578295095149fd2925cd5940c5a137bfd6a84ffde9dd_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

46b1ececb230d51a20f1578295095149fd2925cd5940c5a137bfd6a84ffde9dd_NeikiAnalytics.exe
Size

190KB
MD5

184825fc23114434f8ec4f39be7ac690
SHA1

5441b255b5e9ef12e3820b5966f59b25813afb4a
SHA256

46b1ececb230d51a20f1578295095149fd2925cd5940c5a137bfd6a84ffde9dd
SHA512

c50eeeb6049e40f208bc16e628f9edf4c2587c0ad8ff3798a2445118b13bf27e00db3d6e47d493cef3cdd3a0944838d1623da6e7aed3ce33942b6a47a172f7cc
SSDEEP

3072:qKiWZy+d3kgBuLuuNfLlXtq8EZavDpEQNuoqjI7Wj1Q1XgYbq4bfe+QlRpovpJfc:z8s3C7Hw8EZavDpEQNuoqjI7Wj1Q1Xgr

Score

1^/10

Malware Config

Signatures

Files

46b1ececb230d51a20f1578295095149fd2925cd5940c5a137bfd6a84ffde9dd_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

e803b4d006a3ae74c456b4981a00b0b3

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:99:58:72:2c:15:9d:53:30:0c:b9:24
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

19/02/2024, 09:27

Not After

19/02/2027, 09:27

Subject

CN=Keysun Software Co.\,Ltd,O=Keysun Software Co.\,Ltd,L=Nanjing,ST=Jiangsu,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6b:13:35:12:29:70:ec:14:3d:88:c8:74:ad:57:38:4b:23:d6:2c:93:3c:90:5d:08:df:3e:01:64:40:bb:de:ff
Signer

Actual PE Digest

6b:13:35:12:29:70:ec:14:3d:88:c8:74:ad:57:38:4b:23:d6:2c:93:3c:90:5d:08:df:3e:01:64:40:bb:de:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

itunesdb

?unlockLocalITL@@YAXXZ
?lockLocalITL@@YAXXZ

utility

Log
SetLogfile

vdev

?vDevClose@@YAXPAUVDev@@@Z
?vDevOpen@@YAPAUVDev@@W4VDevType@@PBD@Z

commonutils

?mobile_file_read@Utils@@SA_NVQString@@0PAPADPA_JH@Z
?deleteDirectory@Utils@@SAXVQString@@@Z
?clearDir@Utils@@SA_NABVQString@@PA_N@Z
?staticMetaObject@CustomUI@@2UQMetaObject@@B
?qt_metacall@CustomUI@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@CustomUI@@UAEPAXPBD@Z
?rmDir@Utils@@SA_NABVQString@@PA_N@Z
?copyDirectory@Utils@@SA_NABVQDir@@0_N@Z
??0CustomUI@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@_N@Z
??1CustomUI@@UAE@XZ
?exec@CustomUI@@UAEHXZ
?ZIP_QT@Utils@@SAHABVQString@@00@Z

devicehelpers

?allDevices@Manager@DC@@QAE?AV?$QList@PAVAbstractDevice@DC@@@@XZ
?instance@Manager@DC@@SAPAV12@XZ
?currentDevice@Manager@DC@@QAEPAVAbstractDevice@2@XZ

framework

?isSupportAutoUpdate@AkProductInfo@@QBE_NXZ
?instance@AkSettings@@SAPAV1@XZ
?applicationParam@AkSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?setApplicationParam@AkSettings@@QAEXABVQString@@ABVQVariant@@@Z
?appAutoUpdateEnabled@AkSettings@@QBE_NXZ
?setAppAutoUpdateEnabled@AkSettings@@QAEX_N@Z
?setValueUnderGuid@AkSettings@@QAEXABVQString@@ABVQVariant@@@Z
?readValueUnderGuid@AkSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?productName@AkProductInfo@@QBE?AVQString@@ABV2@@Z
?postCreateDerivedDialog@AkDialogBase@@IAEX_N0PAVQMenuBar@@@Z
?resizeEvent@AkDialogBase@@MAEXPAVQResizeEvent@@@Z
?instance@AkProductInfo@@SAPAV1@XZ
?extendParam@AkProductInfo@@QBE?AVQString@@ABV2@0@Z
?information@AkMessageBox@@SA?AW4StandardButton@QDialogButtonBox@@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QDialogButtonBox@@@@W423@3_N@Z
?question@AkMessageBox@@SA?AW4StandardButton@QDialogButtonBox@@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QDialogButtonBox@@@@W423@3_N@Z
?isFolderPathWritable@AkFileUtils@@SA_NABVQString@@@Z
?companyTitle@AkProductInfo@@QBE?AVQString@@XZ
?productNativeName@AkProductInfo@@QBE?AVQString@@ABV2@@Z

qt5widgets

?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?nativeEvent@QWidget@@MAE_NABVQByteArray@@PAXPAJ@Z
?nextCheckState@QAbstractButton@@MAEXXZ
?nextCheckState@QCheckBox@@MAEXXZ
?open@QDialog@@UAEXXZ
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?paintEvent@QCheckBox@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QFrame@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QLabel@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QPushButton@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QRadioButton@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?qt_metacall@QCheckBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QFrame@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QGridLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QHBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QPushButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QRadioButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QVBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QCheckBox@@UAEPAXPBD@Z
?qt_metacast@QFrame@@UAEPAXPBD@Z
?qt_metacast@QGridLayout@@UAEPAXPBD@Z
?qt_metacast@QHBoxLayout@@UAEPAXPBD@Z
?qt_metacast@QLabel@@UAEPAXPBD@Z
?qt_metacast@QPushButton@@UAEPAXPBD@Z
?qt_metacast@QRadioButton@@UAEPAXPBD@Z
?qt_metacast@QVBoxLayout@@UAEPAXPBD@Z
?redirected@QWidget@@MBEPAVQPaintDevice@@PAVQPoint@@@Z
?reject@QDialog@@UAEXXZ
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?setGeometry@QBoxLayout@@UAEXABVQRect@@@Z
?setGeometry@QGridLayout@@UAEXABVQRect@@@Z
?setGeometry@QSpacerItem@@UAEXABVQRect@@@Z
?setVisible@QDialog@@UAEX_N@Z
?setVisible@QWidget@@UAEX_N@Z
?sharedPainter@QWidget@@MBEPAVQPainter@@XZ
?showEvent@QDialog@@MAEXPAVQShowEvent@@@Z
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?sizeHint@QBoxLayout@@UBE?AVQSize@@XZ
?sizeHint@QCheckBox@@UBE?AVQSize@@XZ
?sizeHint@QDialog@@UBE?AVQSize@@XZ
?sizeHint@QFrame@@UBE?AVQSize@@XZ
?sizeHint@QGridLayout@@UBE?AVQSize@@XZ
?sizeHint@QLabel@@UBE?AVQSize@@XZ
?sizeHint@QPushButton@@UBE?AVQSize@@XZ
?sizeHint@QRadioButton@@UBE?AVQSize@@XZ
?sizeHint@QSpacerItem@@UBE?AVQSize@@XZ
?spacerItem@QLayoutItem@@UAEPAVQSpacerItem@@XZ
?spacerItem@QSpacerItem@@UAEPAV1@XZ
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?takeAt@QBoxLayout@@UAEPAVQLayoutItem@@H@Z
?takeAt@QGridLayout@@UAEPAVQLayoutItem@@H@Z
?timerEvent@QAbstractButton@@MAEXPAVQTimerEvent@@@Z
?addItem@QGridLayout@@MAEXPAVQLayoutItem@@@Z
?widget@QLayoutItem@@UAEPAVQWidget@@XZ
?setStretch@QBoxLayout@@QAEXHH@Z
?text@QLabel@@QBE?AVQString@@XZ
?setOpenExternalLinks@QLabel@@QAEX_N@Z
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
??1QWidget@@UAE@XZ
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?raise@QWidget@@QAEXXZ
?setModal@QDialog@@QAEX_N@Z
?setCheckable@QAbstractButton@@QAEX_N@Z
?clicked@QAbstractButton@@QAEX_N@Z
??0QToolButton@@QAE@PAVQWidget@@@Z
??1QToolButton@@UAE@XZ
?setFrameShape@QFrame@@QAEXW4Shape@1@@Z
?setFrameShadow@QFrame@@QAEXW4Shadow@1@@Z
??0QGroupBox@@QAE@PAVQWidget@@@Z
??1QGroupBox@@UAE@XZ
?setTitle@QGroupBox@@QAEXABVQString@@@Z
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
??0QLineEdit@@QAE@PAVQWidget@@@Z
??1QLineEdit@@UAE@XZ
?mouseReleaseEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?setText@QLineEdit@@QAEXABVQString@@@Z
??0QStackedWidget@@QAE@PAVQWidget@@@Z
??1QStackedWidget@@UAE@XZ
?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z
?setCurrentIndex@QStackedWidget@@QAEXH@Z
?getExistingDirectory@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@1V?$QFlags@W4Option@QFileDialog@@@@@Z
?actionEvent@QToolButton@@MAEXPAVQActionEvent@@@Z
?changeEvent@QGroupBox@@MAEXPAVQEvent@@@Z
?changeEvent@QLineEdit@@MAEXPAVQEvent@@@Z
?changeEvent@QToolButton@@MAEXPAVQEvent@@@Z
?childEvent@QGroupBox@@MAEXPAVQChildEvent@@@Z
?contextMenuEvent@QLineEdit@@MAEXPAVQContextMenuEvent@@@Z
?dragEnterEvent@QLineEdit@@MAEXPAVQDragEnterEvent@@@Z
?dragLeaveEvent@QLineEdit@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QLineEdit@@MAEXPAVQDragMoveEvent@@@Z
?dropEvent@QLineEdit@@MAEXPAVQDropEvent@@@Z
?enterEvent@QToolButton@@MAEXPAVQEvent@@@Z
?event@QGroupBox@@MAE_NPAVQEvent@@@Z
?event@QLineEdit@@UAE_NPAVQEvent@@@Z
?event@QStackedWidget@@MAE_NPAVQEvent@@@Z
?event@QToolButton@@MAE_NPAVQEvent@@@Z
?focusInEvent@QGroupBox@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLineEdit@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QLineEdit@@MAEXPAVQFocusEvent@@@Z
?hitButton@QToolButton@@MBE_NABVQPoint@@@Z
?inputMethodEvent@QLineEdit@@MAEXPAVQInputMethodEvent@@@Z
?inputMethodQuery@QLineEdit@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?keyPressEvent@QLineEdit@@MAEXPAVQKeyEvent@@@Z
?leaveEvent@QToolButton@@MAEXPAVQEvent@@@Z
?metaObject@QGroupBox@@UBEPBUQMetaObject@@XZ
?metaObject@QLineEdit@@UBEPBUQMetaObject@@XZ
?metaObject@QStackedWidget@@UBEPBUQMetaObject@@XZ
?metaObject@QToolButton@@UBEPBUQMetaObject@@XZ
?metaObject@QWidget@@UBEPBUQMetaObject@@XZ
?minimumSizeHint@QGroupBox@@UBE?AVQSize@@XZ
?minimumSizeHint@QLineEdit@@UBE?AVQSize@@XZ
?minimumSizeHint@QToolButton@@UBE?AVQSize@@XZ
?mouseDoubleClickEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QGroupBox@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QGroupBox@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QToolButton@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QGroupBox@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QToolButton@@MAEXPAVQMouseEvent@@@Z
?nextCheckState@QToolButton@@MAEXXZ
?paintEvent@QGroupBox@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QLineEdit@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QToolButton@@MAEXPAVQPaintEvent@@@Z
?qt_metacall@QGroupBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QLineEdit@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QStackedWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QToolButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QGroupBox@@UAEPAXPBD@Z
?qt_metacast@QLineEdit@@UAEPAXPBD@Z
?qt_metacast@QStackedWidget@@UAEPAXPBD@Z
?qt_metacast@QToolButton@@UAEPAXPBD@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?resizeEvent@QGroupBox@@MAEXPAVQResizeEvent@@@Z
?sizeHint@QLineEdit@@UBE?AVQSize@@XZ
?sizeHint@QToolButton@@UBE?AVQSize@@XZ
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?timerEvent@QToolButton@@MAEXPAVQTimerEvent@@@Z
?staticMetaObject@QAbstractButton@@2UQMetaObject@@B
?staticMetaObject@QToolButton@@2UQMetaObject@@B
??0QDialogButtonBox@@QAE@PAVQWidget@@@Z
??1QDialogButtonBox@@UAE@XZ
?setOrientation@QDialogButtonBox@@QAEXW4Orientation@Qt@@@Z
?setStandardButtons@QDialogButtonBox@@QAEXV?$QFlags@W4StandardButton@QDialogButtonBox@@@@@Z
?changeEvent@QDialogButtonBox@@MAEXPAVQEvent@@@Z
?event@QDialogButtonBox@@MAE_NPAVQEvent@@@Z
?metaObject@QDialogButtonBox@@UBEPBUQMetaObject@@XZ
?qt_metacall@QDialogButtonBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QDialogButtonBox@@UAEPAXPBD@Z
?setMovie@QLabel@@QAEXPAVQMovie@@@Z
?setCurrentWidget@QStackedWidget@@QAEXPAVQWidget@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QRadioButton@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QCheckBox@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?minimumSizeHint@QRadioButton@@UBE?AVQSize@@XZ
?minimumSizeHint@QPushButton@@UBE?AVQSize@@XZ
?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?minimumSizeHint@QCheckBox@@UBE?AVQSize@@XZ
?minimumSize@QSpacerItem@@UBE?AVQSize@@XZ
?minimumSize@QGridLayout@@UBE?AVQSize@@XZ
?minimumSize@QBoxLayout@@UBE?AVQSize@@XZ
?minimumHeightForWidth@QLayoutItem@@UBEHH@Z
?minimumHeightForWidth@QGridLayout@@UBEHH@Z
?minimumHeightForWidth@QBoxLayout@@UBEHH@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?metaObject@QVBoxLayout@@UBEPBUQMetaObject@@XZ
?metaObject@QRadioButton@@UBEPBUQMetaObject@@XZ
?metaObject@QPushButton@@UBEPBUQMetaObject@@XZ
?metaObject@QLabel@@UBEPBUQMetaObject@@XZ
?metaObject@QHBoxLayout@@UBEPBUQMetaObject@@XZ
?metaObject@QGridLayout@@UBEPBUQMetaObject@@XZ
?metaObject@QFrame@@UBEPBUQMetaObject@@XZ
?metaObject@QCheckBox@@UBEPBUQMetaObject@@XZ
?maximumSize@QSpacerItem@@UBE?AVQSize@@XZ
?maximumSize@QGridLayout@@UBE?AVQSize@@XZ
?maximumSize@QBoxLayout@@UBE?AVQSize@@XZ
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?layout@QLayoutItem@@UAEPAVQLayout@@XZ
?layout@QLayout@@UAEPAV1@XZ
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyReleaseEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QPushButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QLabel@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z
?itemAt@QGridLayout@@UBEPAVQLayoutItem@@H@Z
?itemAt@QBoxLayout@@UBEPAVQLayoutItem@@H@Z
?isEmpty@QSpacerItem@@UBE_NXZ
?isEmpty@QLayout@@UBE_NXZ
?invalidate@QLayoutItem@@UAEXXZ
?invalidate@QGridLayout@@UAEXXZ
?invalidate@QBoxLayout@@UAEXXZ
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?initPainter@QWidget@@MBEXPAVQPainter@@@Z
?indexOf@QLayout@@UBEHPAVQWidget@@@Z
?hitButton@QRadioButton@@MBE_NABVQPoint@@@Z
?hitButton@QCheckBox@@MBE_NABVQPoint@@@Z
?hitButton@QAbstractButton@@MBE_NABVQPoint@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?heightForWidth@QWidget@@UBEHH@Z
?heightForWidth@QLayoutItem@@UBEHH@Z
?heightForWidth@QLabel@@UBEHH@Z
?heightForWidth@QGridLayout@@UBEHH@Z
?heightForWidth@QBoxLayout@@UBEHH@Z
?hasHeightForWidth@QWidget@@UBE_NXZ
?hasHeightForWidth@QLayoutItem@@UBE_NXZ
?hasHeightForWidth@QGridLayout@@UBE_NXZ
?hasHeightForWidth@QBoxLayout@@UBE_NXZ
?geometry@QSpacerItem@@UBE?AVQRect@@XZ
?geometry@QLayout@@UBE?AVQRect@@XZ
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QAbstractButton@@MAEXPAVQFocusEvent@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?focusNextPrevChild@QLabel@@MAE_N_N@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QAbstractButton@@MAEXPAVQFocusEvent@@@Z
?expandingDirections@QSpacerItem@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?expandingDirections@QGridLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?expandingDirections@QBoxLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?eventFilter@QDialog@@MAE_NPAVQObject@@PAVQEvent@@@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
?event@QRadioButton@@MAE_NPAVQEvent@@@Z
?event@QPushButton@@MAE_NPAVQEvent@@@Z
?event@QLabel@@MAE_NPAVQEvent@@@Z
?event@QFrame@@MAE_NPAVQEvent@@@Z
?event@QCheckBox@@MAE_NPAVQEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?done@QDialog@@UAEXH@Z
?devType@QWidget@@UBEHXZ
?count@QGridLayout@@UBEHXZ
?count@QBoxLayout@@UBEHXZ
?controlTypes@QLayoutItem@@UBE?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ
?controlTypes@QLayout@@UBE?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z
?childEvent@QLayout@@MAEXPAVQChildEvent@@@Z
?checkStateSet@QCheckBox@@MAEXXZ
?checkStateSet@QAbstractButton@@MAEXXZ
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?changeEvent@QLabel@@MAEXPAVQEvent@@@Z
?changeEvent@QFrame@@MAEXPAVQEvent@@@Z
?text@QLineEdit@@QBE?AVQString@@XZ
?changeEvent@QAbstractButton@@MAEXPAVQEvent@@@Z
?addItem@QBoxLayout@@UAEXPAVQLayoutItem@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
??1QRadioButton@@UAE@XZ
??0QRadioButton@@QAE@PAVQWidget@@@Z
??1QPushButton@@UAE@XZ
??0QPushButton@@QAE@PAVQWidget@@@Z
?setText@QLabel@@QAEXABVQString@@@Z
?setWordWrap@QLabel@@QAEX_N@Z
??1QLabel@@UAE@XZ
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?addWidget@QGridLayout@@QAEXPAVQWidget@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?setSpacing@QGridLayout@@QAEXH@Z
??1QGridLayout@@UAE@XZ
??0QGridLayout@@QAE@PAVQWidget@@@Z
??1QVBoxLayout@@UAE@XZ
??0QVBoxLayout@@QAE@PAVQWidget@@@Z
??1QHBoxLayout@@UAE@XZ
??0QHBoxLayout@@QAE@PAVQWidget@@@Z
?setSpacing@QBoxLayout@@QAEXH@Z
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?setContentsMargins@QLayout@@QAEXHHHH@Z
??1QSpacerItem@@UAE@XZ
??0QSpacerItem@@QAE@HHW4Policy@QSizePolicy@@0@Z
??1QFrame@@UAE@XZ
??0QFrame@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
??1QCheckBox@@UAE@XZ
??0QCheckBox@@QAE@PAVQWidget@@@Z
?setChecked@QAbstractButton@@QAEX_N@Z
?isChecked@QAbstractButton@@QBE_NXZ
?setText@QAbstractButton@@QAEXABVQString@@@Z
?accept@QDialog@@UAEXXZ
??1QDialog@@UAE@XZ
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ
?setFocusPolicy@QWidget@@QAEXW4FocusPolicy@Qt@@@Z
?setVerticalStretch@QSizePolicy@@QAEXH@Z
?setHorizontalStretch@QSizePolicy@@QAEXH@Z
??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z

qt5gui

?qt_metacall@QMovie@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?metaObject@QMovie@@UBEPBUQMetaObject@@XZ
?stop@QMovie@@QAEXXZ
?start@QMovie@@QAEXXZ
??1QMovie@@UAE@XZ
??0QMovie@@QAE@ABVQString@@ABVQByteArray@@PAVQObject@@@Z
?openUrl@QDesktopServices@@SA_NABVQUrl@@@Z
?qt_metacast@QMovie@@UAEPAXPBD@Z

qt5core

?toString@QVariant@@QBE?AVQString@@XZ
?toBool@QVariant@@QBE_NXZ
?toInt@QVariant@@QBEHPA_N@Z
??0QVariant@@QAE@ABVQString@@@Z
??0QVariant@@QAE@PBD@Z
??0QVariant@@QAE@_N@Z
??0QVariant@@QAE@H@Z
??1QVariant@@QAE@XZ
?fromUtf16@QString@@SA?AV1@PBGH@Z
?startsWith@QString@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?at@QString@@QBE?BVQChar@@H@Z
?entryInfoList@QDir@@QBE?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?singleShotImpl@QTimer@@CAXHW4TimerType@Qt@@PBVQObject@@PAVQSlotObjectBase@QtPrivate@@@Z
?isDir@QFileInfo@@QBE_NXZ
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
??0QFileInfo@@QAE@ABV0@@Z
?remove@QFile@@QAE_NXZ
?deleteLater@QObject@@QAEXXZ
?QStringList_contains@QtPrivate@@YA_NPBVQStringList@@ABVQString@@W4CaseSensitivity@Qt@@@Z
??0QByteArray@@QAE@XZ
??BQByteArray@@QBEPBDXZ
?shared_null@QMapDataBase@@2U1@B
?shared_null@QListData@@2UData@1@B
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?fromLocalFile@QUrl@@SA?AV1@ABVQString@@@Z
??1QUrl@@QAE@XZ
?exists@QDir@@QBE_NABVQString@@@Z
?exists@QDir@@QBE_NXZ
?mkpath@QDir@@QBE_NABVQString@@@Z
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?setSorting@QDir@@QAEXV?$QFlags@W4SortFlag@QDir@@@@@Z
?setNameFilters@QDir@@QAEXABVQStringList@@@Z
?cdUp@QDir@@QAE_NXZ
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
?absolutePath@QDir@@QBE?AVQString@@XZ
??1QDir@@QAE@XZ
??0QDir@@QAE@ABVQString@@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?toString@QDateTime@@QBE?AVQString@@ABV2@@Z
??1QDateTime@@QAE@XZ
?path@QFileInfo@@QBE?AVQString@@XZ
?fileName@QFileInfo@@QBE?AVQString@@XZ
?exists@QFileInfo@@QBE_NXZ
??1QFileInfo@@QAE@XZ
??0QFileInfo@@QAE@ABVQString@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?copy@QFile@@SA_NABVQString@@0@Z
??1QFile@@UAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?flush@QFileDevice@@QAE_NXZ
?close@QFileDevice@@UAEXXZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?freeData@QMapDataBase@@SAXPAU1@@Z
?createData@QMapDataBase@@SAPAU1@XZ
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z
?createNode@QMapDataBase@@QAEPAUQMapNodeBase@@HHPAU2@_N@Z
?recalcMostLeftNode@QMapDataBase@@QAEXXZ
?write@QIODevice@@QAE_JPBD_J@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
?append@QListData@@QAEPAPAXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??8QString@@QBE_NPBD@Z
??YQString@@QAEAAV0@PBD@Z
??8@YA_NABVQString@@0@Z
?toWCharArray@QString@@QBEHPA_W@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?toUtf8@QString@@QBE?AVQByteArray@@XZ
?utf16@QString@@QBEPBGXZ
?endsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z
?right@QString@@QBE?AV1@H@Z
?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
??0QString@@QAE@$$QAV0@@Z
??4QString@@QAEAAV0@ABV0@@Z
?data@QByteArray@@QAEPADXZ
??1QByteArray@@QAE@XZ
??0QChar@@QAE@UQLatin1Char@@@Z
?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z
?sender@QObject@@IBEPAV1@XZ
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
??0QString@@QAE@ABV0@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z
?setObjectName@QObject@@QAEXABVQString@@@Z
?objectName@QObject@@QBE?AVQString@@XZ
??1QString@@QAE@XZ
??0QString@@QAE@XZ
??1Connection@QMetaObject@@QAE@XZ
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ

kernel32

IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
SetFileAttributesW
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
DecodePointer
GetDiskFreeSpaceExW
GetDriveTypeW
EncodePointer

shell32

ShellExecuteW

msvcp120

?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr120

__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_amsg_exit
memcpy
__CxxFrameHandler3
_CxxThrowException
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
free
_malloc_crt
_initterm
_initterm_e
memset
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_mkdir
?terminate@@YAXXZ

Exports

Exports

??0Preferences@@AAE@XZ
??1Preferences@@AAE@XZ
??4Preferences@@QAEAAV0@ABV0@@Z
?CEIP@Preferences@@QBE_NXZ
?alwaysAskWarning@Preferences@@QBE_NW4Warnings@1@@Z
?askAudioAddUseRingtoneMaker@Preferences@@IBE_NXZ
?askImageExportConvertHEIC@Preferences@@IBE_NXZ
?askImageExportSkipiCloud@Preferences@@IBE_NXZ
?askProgramClose@Preferences@@IBE_NXZ
?askSimpleWarning@Preferences@@IBE_NW4Warnings@1@@Z
?askVideoAddConvertQuality@Preferences@@IBE_NXZ
?askWarning@Preferences@@QBE_NW4Warnings@1@@Z
?audioAddUseRingtoneMaker@Preferences@@QBE_NXZ
?autoUpdate@Preferences@@QBE_NXZ
?defaultLogFile@Preferences@@QBE?AVQString@@XZ
?defaultTempDir@Preferences@@QBE?AVQString@@XZ
?imageExportConvertHEIC@Preferences@@QBE_NXZ
?imageExportSkipiCloud@Preferences@@QBE_NXZ
?instance@Preferences@@SAPAV1@PAVQWidget@@@Z
?keepAudioTimes@Preferences@@QBE_NXZ
?keepImageTimes@Preferences@@QBE_NXZ
?keepVideoTimes@Preferences@@QBE_NXZ
?logFile@Preferences@@QBE?AVQString@@XZ
?m_pInstance@Preferences@@0PAV1@A
?m_pWindow@Preferences@@0PAVQWidget@@A
?openFolderAfterExport@Preferences@@QBE_NXZ
?preventiTunes@Preferences@@QBE_NXZ
?programClose@Preferences@@QBE_NXZ
?release@Preferences@@SAXXZ
?setAlwaysAskWarning@Preferences@@QAEXW4Warnings@1@_N@Z
?setAudioAddUseRingtoneMaker@Preferences@@QAEX_N@Z
?setAutoUpdate@Preferences@@QAEX_N@Z
?setCEIP@Preferences@@QAEX_N@Z
?setImageExportConvertHEIC@Preferences@@QAEX_N@Z
?setImageExportSkipiCloud@Preferences@@QAEX_N@Z
?setKeepAudioTimes@Preferences@@QAEX_N@Z
?setKeepImageTimes@Preferences@@QAEX_N@Z
?setKeepVideoTimes@Preferences@@QAEX_N@Z
?setLogFile@Preferences@@QAEXABVQString@@@Z
?setOpenFolderAfterExport@Preferences@@QAEX_N@Z
?setPreventiTunes@Preferences@@QAEX_N@Z
?setProgramClose@Preferences@@QAEX_N@Z
?setTempDir@Preferences@@QAEXABVQString@@@Z
?setVideoAddConvertQuality@Preferences@@QAEXW4VideoQuality@1@@Z
?showPreferenceDialog@Preferences@@QBEXXZ
?tempDir@Preferences@@QBE?AVQString@@XZ
?videoAddConvertQuality@Preferences@@QBE?AW4VideoQuality@1@XZ

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e803b4d006a3ae74c456b4981a00b0b3

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

20:99:58:72:2c:15:9d:53:30:0c:b9:24Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

6b:13:35:12:29:70:ec:14:3d:88:c8:74:ad:57:38:4b:23:d6:2c:93:3c:90:5d:08:df:3e:01:64:40:bb:de:ffSigner

Headers

DLL Characteristics

File Characteristics

Imports

itunesdb

utility

vdev

commonutils

devicehelpers

framework

qt5widgets

qt5gui

qt5core

kernel32

shell32

msvcp120

msvcr120

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 14KB - Virtual size: 14KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

20:99:58:72:2c:15:9d:53:30:0c:b9:24
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

6b:13:35:12:29:70:ec:14:3d:88:c8:74:ad:57:38:4b:23:d6:2c:93:3c:90:5d:08:df:3e:01:64:40:bb:de:ff
Signer

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 14KB - Virtual size: 14KB