2fcc86d5ac42bc12cd5fbfa18ee4c840_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

2fcc86d5ac42bc12cd5fbfa18ee4c840_NeikiAnalytics
Size

1.3MB
MD5

2fcc86d5ac42bc12cd5fbfa18ee4c840
SHA1

765841ffc259d27a2136adbe594cab2c4cdc5606
SHA256

28b1cedadce1616a8c470e33baf8ce6a5e25c6da1b43af0b1c4c89338b516980
SHA512

19f35044dd74a6aacd0054731e6eae010649d0875888baec643b4c10d652f22459fd6e511830c3d6a6950a0dfe84eac010740afa9cdb02f9f4fb22ba1b94b94e
SSDEEP

24576:S9ilDEQrDKYiUBSWAIG1Ph6H/3pppkqj3v8GNRgakhdOD:S9qNxkhdOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fcc86d5ac42bc12cd5fbfa18ee4c840_NeikiAnalytics

Files

2fcc86d5ac42bc12cd5fbfa18ee4c840_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

51242eb0112c344815e7b9b307f01954

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\itsuhane\Documents\Visual Studio 2010\Projects\RealTimeDepthRecovery\Debug\RealTimeDepthRecovery.pdb

Imports

cudart32_42_9

cudaDeviceSynchronize
cudaGetDeviceProperties
cudaMemcpy2D
cudaMallocPitch
cudaMemcpyFromSymbol
cudaMemcpy3D
cudaMemset2D
cudaMemcpy
cudaMalloc
cudaSetDevice
cudaConfigureCall
cudaMalloc3D
cudaGetErrorString
cudaMemset3D
cudaFree
cudaGetLastError
cudaSetupArgument
__cudaRegisterVar
__cudaRegisterFunction
__cudaRegisterFatBinary
__cudaUnregisterFatBinary
cudaMemcpyToSymbol
cudaLaunch
cudaGetDeviceCount

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
FreeLibrary
GetModuleHandleW
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
WaitForMultipleObjects
CreateThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
WideCharToMultiByte
IsDebuggerPresent
EncodePointer

msvcp100d

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Debug_message@std@@YAXPB_W0I@Z
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAE_J_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

msvcr100d

free
_vsnprintf
malloc
??_V@YAXPAX@Z
fprintf
pow
cos
sin
log
floor
ceil
fabs
ldexp
exp
sqrt
memset
memcpy
abs
getchar
fclose
atoi
fscanf_s
fseek
fopen_s
__iob_func
strlen
calloc
_wassert
??3@YAXPAX@Z
memmove
_CxxThrowException
memcmp
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_purecall
_invalid_parameter
_CrtDbgReportW
??0exception@std@@QAE@XZ
clock
sprintf
_unlock
__dllonexit
_lock
_onexit
_CRT_RTC_INITW
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_amsg_exit
__getmainargs
_exit
_XcptFilter
_cexit
__initenv
_CrtSetCheckCount
_initterm
_initterm_e
_crt_debugger_hook
_except_handler4_common
_wmakepath_s
wcscpy_s
_wsplitpath_s
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
printf
exit
__CxxFrameHandler3
system

cximaged

??0CxImage@@QAE@I@Z
?DestroyFrames@CxImage@@QAE_NXZ
?Destroy@CxImage@@QAE_NXZ
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@HH_N@Z
?AlphaCreate@CxImage@@QAE_NXZ
?SetPixelColor@CxImage@@QAEXHHUtagRGBQUAD@@_N@Z
?Load@CxImage@@QAE_NPBDI@Z
?GetHeight@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
?Create@CxImage@@QAEPAXIIII@Z
?Copy@CxImage@@QAEXABV1@_N11@Z
?Edge@CxImage@@QAE_NH@Z
?Save@CxImage@@QAE_NPBDI@Z
?Resample@CxImage@@QAE_NHHHPAV1@@Z

opencv_highgui231d

cvLoadImage

opencv_imgproc231d

cvSobel
cvResize

opencv_core231d

cvGetSize
cvCreateImage
cvGetReal2D
cvSetReal2D
cvNormalize
cvReleaseImage
?deallocate@Mat@cv@@QAEXXZ
?fastFree@cv@@YAXPAX@Z

Sections

.textbss
Size: - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nv_fatb
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvFatBi
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51242eb0112c344815e7b9b307f01954

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

cudart32_42_9

kernel32

msvcp100d

msvcr100d

cximaged

opencv_highgui231d

opencv_imgproc231d

opencv_core231d

Sections

.textbss Size: - Virtual size: 86KB

.text Size: 197KB - Virtual size: 197KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 3KB - Virtual size: 10KB

.idata Size: 8KB - Virtual size: 7KB

.nv_fatb Size: 1.1MB - Virtual size: 1.1MB

.nvFatBi Size: 512B - Virtual size: 350B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 10KB - Virtual size: 10KB

.textbss
Size: - Virtual size: 86KB

.text
Size: 197KB - Virtual size: 197KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 3KB - Virtual size: 10KB

.idata
Size: 8KB - Virtual size: 7KB

.nv_fatb
Size: 1.1MB - Virtual size: 1.1MB

.nvFatBi
Size: 512B - Virtual size: 350B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 10KB - Virtual size: 10KB