3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics
Size

19KB
MD5

3e6f26d2c489dfd1e9efbb86450dd370
SHA1

a99d68c9e3e7e81672f9cb9b5cd86c4c1c0c6400
SHA256

87fa09f86ad43050c41d1eec6d87d1c1db73a3d8cae6afa1259ac090c7d8e173
SHA512

7ea76c3d8873b54496f452c53d237591d530183b45e8288cec0c355e49fb52e9510fe529ae942fb58a933ffdcd6a9ebc77d4e115c8fbb76256450967306a14fd
SSDEEP

384:qHLuxOi/osbDrlrL2fwAHnP6P1DVzcBH4z:2LeOigsbdrWHSPZVIBH4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics

Files

3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

5f9b53b42f9a84fd2f42c5fe94aaf0e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

qt5svg

?render@QSvgRenderer@@QAEXPAVQPainter@@ABVQRectF@@@Z
?load@QSvgRenderer@@QAE_NPAVQXmlStreamReader@@@Z
?load@QSvgRenderer@@QAE_NABVQByteArray@@@Z
?viewBox@QSvgRenderer@@QBE?AVQRect@@XZ
??1QSvgRenderer@@UAE@XZ
??0QSvgRenderer@@QAE@PAVQObject@@@Z

qt5gui

?write@QImageIOHandler@@UAE_NABVQImage@@@Z
?nextImageDelay@QImageIOHandler@@UBEHXZ
?loopCount@QImageIOHandler@@UBEHXZ
?jumpToNextImage@QImageIOHandler@@UAE_NXZ
?jumpToImage@QImageIOHandler@@UAE_NH@Z
?imageCount@QImageIOHandler@@UBEHXZ
?currentImageRect@QImageIOHandler@@UBE?AVQRect@@XZ
?currentImageNumber@QImageIOHandler@@UBEHXZ
?end@QPainter@@QAE_NXZ
??1QPainter@@QAE@XZ
??0QPainter@@QAE@PAVQPaintDevice@@@Z
?invalidate@QColor@@AAEXXZ
??BQColor@@QBE?AVQVariant@@XZ
??4QColor@@QAEAAV0@ABV0@@Z
?rgba@QColor@@QBEIXZ
??0QColor@@QAE@W4GlobalColor@Qt@@@Z
?fill@QImage@@QAEXI@Z
??4QImage@@QAEAAV0@$$QAV0@@Z
??1QImage@@UAE@XZ
??0QImage@@QAE@ABVQSize@@W4Format@0@@Z
?mapRect@QTransform@@QBE?AVQRectF@@ABV2@@Z
?scale@QTransform@@QAEAAV1@NN@Z
?translate@QTransform@@QAEAAV1@NN@Z
??0QTransform@@QAE@XZ
?format@QImageIOHandler@@QBE?AVQByteArray@@XZ
?setFormat@QImageIOHandler@@QBEXABVQByteArray@@@Z
?device@QImageIOHandler@@QBEPAVQIODevice@@XZ
??1QImageIOHandler@@UAE@XZ
??0QImageIOHandler@@QAE@XZ
?staticMetaObject@QImageIOPlugin@@2UQMetaObject@@B
??1QImageIOPlugin@@UAE@XZ
??0QImageIOPlugin@@QAE@PAVQObject@@@Z
?qt_metacall@QImageIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QImageIOPlugin@@UAEPAXPBD@Z
?setFormat@QImageIOHandler@@QAEXABVQByteArray@@@Z
?setDevice@QImageIOHandler@@QAEXPAVQIODevice@@@Z

qt5core

?staticMetaObject@QBuffer@@2UQMetaObject@@B
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?isReadable@QIODevice@@QBE_NXZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z
??0QByteArray@@QAE@PBDH@Z
??1QByteArray@@QAE@XZ
?constData@QByteArray@@QBEPBDXZ
?indexOf@QByteArray@@QBEHPBDH@Z
?startsWith@QByteArray@@QBE_NPBD@Z
?fromRawData@QByteArray@@SA?AV1@PBDH@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?peek@QIODevice@@QAE?AVQByteArray@@_J@Z
??0QXmlStreamReader@@QAE@XZ
??1QXmlStreamReader@@QAE@XZ
?setDevice@QXmlStreamReader@@QAEXPAVQIODevice@@@Z
??0QVariant@@QAE@XZ
??1QVariant@@QAE@XZ
??0QVariant@@QAE@H@Z
??0QVariant@@QAE@ABVQSize@@@Z
??0QVariant@@QAE@ABVQRect@@@Z
??0QVariant@@QAE@$$QAV0@@Z
?userType@QVariant@@QBEHXZ
?toRect@QVariant@@QBE?AVQRect@@XZ
?toSize@QVariant@@QBE?AVQSize@@XZ
?constData@QVariant@@QBEPBXXZ
?convert@QVariant@@QBE_NHPAX@Z
?data@QBuffer@@QBEABVQByteArray@@XZ

msvcp110

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ

msvcr110

_initterm_e
_initterm
_malloc_crt
free
_except_handler4_common
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
memcpy
__CxxFrameHandler3
_CxxThrowException
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
__clean_type_info_names_internal
_amsg_exit

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f9b53b42f9a84fd2f42c5fe94aaf0e0

Headers

DLL Characteristics

File Characteristics

Imports

qt5svg

qt5gui

qt5core

msvcp110

msvcr110

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.qtmetad Size: 512B - Virtual size: 304B

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.qtmetad
Size: 512B - Virtual size: 304B

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 1KB - Virtual size: 1KB