2aeca2121aae741389c783fa24a15dd0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

2aeca2121aae741389c783fa24a15dd0_NeikiAnalytics
Size

142KB
MD5

2aeca2121aae741389c783fa24a15dd0
SHA1

adefc3fe227be33b12d52a16dc6b05fa32d1d771
SHA256

4059cce8e4ca8cd61129e485df67a4c4e753207a4e33d4426b32f50afc80637c
SHA512

64cf56a93d89c8bc2df797b7c72906003fe9c3f67cc49cb47fc656be58a370a8b187b5de18c4e49c61f32ab0d6e12fec600f447508f3b9ee80a605f4e48a042d
SSDEEP

3072:97SOr2cHhm2LAHymy0HkY/BoPqAqx8/xf:VuZ3VHkcGqnx8/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aeca2121aae741389c783fa24a15dd0_NeikiAnalytics

Files

2aeca2121aae741389c783fa24a15dd0_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

21aadf2e9f795cc51b6404767b4a5bb1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fclose
fgets
fopen
fputc
fread
free
fseek
ftell
fwrite
localeconv
malloc
memcmp
memcpy
memmove
realloc
signal
strcat
strerror
strlen
strncmp
strtoul
vfprintf
wcslen

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNSi4readEPcx
_ZNSi5seekgESt4fposIiE
_ZNSo5seekpESt4fposIiE
_ZNSo5writeEPKcx
_ZNSt12__basic_fileIcED1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv
_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt6localeD1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt19__throw_logic_errorPKc
_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVSt13basic_filebufIcSt11char_traitsIcEE
_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_acquire
__cxa_guard_release
__cxa_rethrow
__gxx_personality_seh0

qt5core

_Z7qstrcmpRK10QByteArrayPKc
_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QByteArray11fromRawDataEPKci
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray17simplified_helperERKS_
_ZN10QByteArray4fillEci
_ZN10QByteArray6appendEPKc
_ZN10QByteArray6appendEPKci
_ZN10QByteArray6appendERKS_
_ZN10QByteArray6appendEc
_ZN10QByteArray6expandEi
_ZN10QByteArray7prependERKS_
_ZN10QByteArrayaSERKS_
_ZN11QFileDevice4seekEx
_ZN11QFileDevice5closeEv
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile6removeEv
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN7QRegExp18setCaseSensitivityEN2Qt15CaseSensitivityE
_ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE
_ZN7QRegExpD1Ev
_ZN7QString13toUtf8_helperERKS_
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString15toLatin1_helperERKS_
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QString6insertEiPK5QChari
_ZN7QString6numberEji
_ZN7QString6removeERKS_N2Qt15CaseSensitivityE
_ZN7QString8vsprintfEPKcPc
_ZN7QStringaSERKS_
_ZN9QFileInfoC1ERK5QFile
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QIODevice4readEx
_ZN9QIODevice5writeEPKcx
_ZN9QIODevice7readAllEv
_ZN9QIODevice8readLineEx
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData7disposeEPNS_4DataE
_ZNK10QByteArray3midEii
_ZNK10QByteArray5splitEc
_ZNK10QByteArray6isNullEv
_ZNK10QByteArray6toUIntEPbi
_ZNK10QByteArray7indexOfEPKci
_ZNK11QFileDevice3posEv
_ZNK11QFileDevice5atEndEv
_ZNK5QFile4sizeEv
_ZNK5QFile6existsEv
_ZNK7QRegExp10exactMatchERK7QString
_ZNK7QString4leftEi
_ZNK7QString5splitERK7QRegExpNS_13SplitBehaviorE
_ZNK7QString7indexOfE5QChariN2Qt15CaseSensitivityE
_ZNK7QString8endsWithERKS_N2Qt15CaseSensitivityE
_ZNK9QFileInfo8fileNameEv

Exports

Exports

Alloc
Display
FILE_ParseFile
_Z11AddSegToElfRK7QStringRK10QByteArrayjS1_
_Z12ParseErrorCbPvjPKcPc
_Z12ParsedDataCbPvP17FILE_ParsedData_t
_Z14MotorolaSave32P6_iobufPhjjj
_Z14StartSegmentCbPvj
_Z15FileSegmentsTriPv
_Z15FinishSegmentCbPvjj
_Z17createDummyHeaderijj
_Z17createSignedImageR10QByteArray
_Z5CRC32Phj
_Z7put_recPhjjjP6_iobuf
_Z8checksumPhj
_Z9IntelSaveP6_iobufPhjj
_ZN10DisplayMng10logMessageEiPKcz
_ZN10DisplayMng11getInstanceEv
_ZN10DisplayMng11initLogFileE7QString
_ZN10DisplayMngD1Ev
_ZN10DisplayMngD2Ev
_ZN10QByteArray6detachEv
_ZN10QByteArrayD1Ev
_ZN11FileManager10MergeFilesERKSt6vectorIP8FileDataSaIS2_EEPS2_
_ZN11FileManager11ELF_ParsingERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEP7FileELF
_ZN11FileManager11MultipleCRCERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEjjj
_ZN11FileManager11SFI_ParsingERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEP7FileSFI
_ZN11FileManager11SaveHexFileEP8FileDataRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN11FileManager12SaveSrecFileEP8FileDataRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN11FileManager15HexSrec_ParsingERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEP8FileData
_ZN11FileManager15filter_tsv_fileERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEP7FileTSV
_ZN11FileManager17ReduceFileSegmentEP8FileData
_ZN11FileManager18GetDataFromSectionERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_PPh
_ZN11FileManager18extract_csv_configERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEP8FileData
_ZN11FileManager18setDisplayCallbackEPFviPKcE
_ZN11FileManager19SBSFUAddToUserAppliERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_S7_
_ZN11FileManager4OpenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPP8FileType
_ZN11FileManager8SaveFileEP8FileDataRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN11FileManagerC1Ev
_ZN11FileManagerC2Ev
_ZN11FileManagerD1Ev
_ZN11FileManagerD2Ev
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE11append_dataEPKcj
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE11append_dataERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE11set_addressEy
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE14set_addr_alignEy
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE14set_entry_sizeEy
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE22set_name_string_offsetEj
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE4loadERSt14basic_ifstreamIcSt11char_traitsIcEESt4fposIiE
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE4saveERSt14basic_ofstreamIcSt11char_traitsIcEESt4fposIiES9_
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_dataEPKcj
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_dataERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_infoEj
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_linkEj
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_nameENSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_sizeEy
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE8set_typeEj
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE9set_flagsEy
_ZN5ELFIO12section_implINS_10Elf32_ShdrEE9set_indexEt
_ZN5ELFIO12section_implINS_10Elf32_ShdrEED0Ev
_ZN5ELFIO12section_implINS_10Elf32_ShdrEED1Ev
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE11append_dataEPKcj
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE11append_dataERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE11set_addressEy
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE14set_addr_alignEy
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE14set_entry_sizeEy
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE22set_name_string_offsetEj
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE4loadERSt14basic_ifstreamIcSt11char_traitsIcEESt4fposIiE
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE4saveERSt14basic_ofstreamIcSt11char_traitsIcEESt4fposIiES9_
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_dataEPKcj
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_dataERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_infoEj
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_linkEj
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_nameENSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_sizeEy
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE8set_typeEj
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE9set_flagsEy
_ZN5ELFIO12section_implINS_10Elf64_ShdrEE9set_indexEt
_ZN5ELFIO12section_implINS_10Elf64_ShdrEED0Ev
_ZN5ELFIO12section_implINS_10Elf64_ShdrEED1Ev
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE13set_file_sizeEy
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE15set_memory_sizeEy
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE17add_section_indexEty
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE19set_virtual_addressEy
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE20set_physical_addressEy
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE4saveERSt14basic_ofstreamIcSt11char_traitsIcEESt4fposIiES9_
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE8set_typeEj
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE9set_alignEy
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE9set_flagsEj
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEE9set_indexEt
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEED0Ev
_ZN5ELFIO12segment_implINS_10Elf32_PhdrEED1Ev
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE13set_file_sizeEy
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE15set_memory_sizeEy
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE17add_section_indexEty
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE19set_virtual_addressEy
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE20set_physical_addressEy
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE4saveERSt14basic_ofstreamIcSt11char_traitsIcEESt4fposIiES9_
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE8set_typeEj
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE9set_alignEy
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE9set_flagsEj
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEE9set_indexEt
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEED0Ev
_ZN5ELFIO12segment_implINS_10Elf64_PhdrEED1Ev
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE10set_os_abiEh
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE11set_machineEt
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE15set_abi_versionEh
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE16set_sections_numEt
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE16set_segments_numEt
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE19set_sections_offsetEy
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE19set_segments_offsetEy
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE26set_section_name_str_indexEt
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE4loadERSt14basic_ifstreamIcSt11char_traitsIcEE
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE8set_typeEt
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE9set_entryEy
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEE9set_flagsEj
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEED0Ev
_ZN5ELFIO15elf_header_implINS_10Elf32_EhdrEED1Ev
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE10set_os_abiEh
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE11set_machineEt
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE15set_abi_versionEh
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE16set_sections_numEt
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE16set_segments_numEt
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE19set_sections_offsetEy
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE19set_segments_offsetEy
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE26set_section_name_str_indexEt
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE4loadERSt14basic_ifstreamIcSt11char_traitsIcEE
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE8set_typeEt
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE9set_entryEy
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEE9set_flagsEj
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEED0Ev
_ZN5ELFIO15elf_header_implINS_10Elf64_EhdrEED1Ev
_ZN5ELFIO21note_section_accessor15process_sectionEv
_ZN5ELFIO5elfio13create_headerEhh
_ZN5ELFIO5elfio13load_sectionsERSt14basic_ifstreamIcSt11char_traitsIcEE
_ZN5ELFIO5elfio13load_segmentsERSt14basic_ifstreamIcSt11char_traitsIcEE
_ZN5ELFIO5elfio14create_sectionEv
_ZN5ELFIO5elfio4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5ELFIO5elfio5cleanEv
_ZN5ELFIO5elfioC1Ev
_ZN5ELFIO5elfioD1Ev
_ZN5QListI10QByteArrayE13detach_helperEi
_ZN5QListI10QByteArrayE18detach_helper_growEii
_ZN5QListI10QByteArrayE6appendERKS0_
_ZN5QListI10QByteArrayE6detachEv
_ZN5QListI10QByteArrayED1Ev
_ZN5QListI7QStringE13detach_helperEi
_ZN5QListI7QStringED2Ev
_ZN5QListIjE18detach_helper_growEii
_ZN5QListIjE6appendERKj
_ZN5QListIjED1Ev
_ZN7QString8fromUtf8EPKci
_ZN7QStringC1EPKc
_ZN7QStringD1Ev
_ZN8QByteRefaSEc
_ZN9QtPrivate8RefCount3refEv
_ZN9QtPrivate8RefCount5derefEv
_ZN9partitionD1Ev
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE11get_addressEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE14get_addr_alignEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE14get_entry_sizeEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE22get_name_string_offsetEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE22is_address_initializedEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE8get_dataEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE8get_infoEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE8get_linkEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE8get_nameB5cxx11Ev
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE8get_sizeEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE8get_typeEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE9get_flagsEv
_ZNK5ELFIO12section_implINS_10Elf32_ShdrEE9get_indexEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE11get_addressEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE14get_addr_alignEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE14get_entry_sizeEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE22get_name_string_offsetEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE22is_address_initializedEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE8get_dataEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE8get_infoEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE8get_linkEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE8get_nameB5cxx11Ev
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE8get_sizeEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE8get_typeEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE9get_flagsEv
_ZNK5ELFIO12section_implINS_10Elf64_ShdrEE9get_indexEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE10get_offsetEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE13get_file_sizeEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE15get_memory_sizeEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE16get_sections_numEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE19get_virtual_addressEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE20get_physical_addressEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE20get_section_index_atEt
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE4loadERSt14basic_ifstreamIcSt11char_traitsIcEESt4fposIiE
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE8get_dataEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE8get_typeEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE9get_alignEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE9get_flagsEv
_ZNK5ELFIO12segment_implINS_10Elf32_PhdrEE9get_indexEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE10get_offsetEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE13get_file_sizeEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE15get_memory_sizeEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE16get_sections_numEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE19get_virtual_addressEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE20get_physical_addressEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE20get_section_index_atEt
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE4loadERSt14basic_ifstreamIcSt11char_traitsIcEESt4fposIiE
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE8get_dataEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE8get_typeEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE9get_alignEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE9get_flagsEv
_ZNK5ELFIO12segment_implINS_10Elf64_PhdrEE9get_indexEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE10get_os_abiEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE11get_machineEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE11get_versionEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE12get_encodingEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE15get_abi_versionEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE15get_elf_versionEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE15get_header_sizeEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE16get_sections_numEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE16get_segments_numEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE19get_sections_offsetEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE19get_segments_offsetEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE22get_section_entry_sizeEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE22get_segment_entry_sizeEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE26get_section_name_str_indexEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE4saveERSt14basic_ofstreamIcSt11char_traitsIcEE
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE8get_typeEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE9get_classEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE9get_entryEv
_ZNK5ELFIO15elf_header_implINS_10Elf32_EhdrEE9get_flagsEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE10get_os_abiEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE11get_machineEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE11get_versionEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE12get_encodingEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE15get_abi_versionEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE15get_elf_versionEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE15get_header_sizeEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE16get_sections_numEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE16get_segments_numEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE19get_sections_offsetEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE19get_segments_offsetEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE22get_section_entry_sizeEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE22get_segment_entry_sizeEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE26get_section_name_str_indexEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE4saveERSt14basic_ofstreamIcSt11char_traitsIcEE
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE8get_typeEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE9get_classEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE9get_entryEv
_ZNK5ELFIO15elf_header_implINS_10Elf64_EhdrEE9get_flagsEv
_ZNK7QString11toStdStringB5cxx11Ev
_ZNSt6vectorI10SegmentSFISaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI11SegmentDataSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI11SegmentDataSaIS0_EE8_M_eraseEN9__gnu_cxx17__normal_iteratorIPS0_S2_EE
_ZNSt6vectorI11SegmentDataSaIS0_EE9push_backERKS0_
_ZNSt6vectorI11relocationsSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI14program_headerSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI14section_headerSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI5notesSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI7symbolsSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorI9partitionSaIS0_EE17_M_realloc_insertIJRKS0_EEEvN9__gnu_cxx17__normal_iteratorIPS0_S2_EEDpOT_
_ZNSt6vectorIPN5ELFIO7sectionESaIS2_EE17_M_realloc_insertIJRKS2_EEEvN9__gnu_cxx17__normal_iteratorIPS2_S4_EEDpOT_
_ZNSt6vectorIPN5ELFIO7segmentESaIS2_EE17_M_realloc_insertIJRKS2_EEEvN9__gnu_cxx17__normal_iteratorIPS2_S4_EEDpOT_
_ZNSt6vectorItSaItEE17_M_realloc_insertIJRKtEEEvN9__gnu_cxx17__normal_iteratorIPtS1_EEDpOT_
_ZNSt6vectorIySaIyEE17_M_realloc_insertIJRKyEEEvN9__gnu_cxx17__normal_iteratorIPyS1_EEDpOT_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructIPKcEEvT_S8_St20forward_iterator_tag
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructIPcEEvT_S7_St20forward_iterator_tag
_ZTIN5ELFIO10elf_headerE
_ZTIN5ELFIO12section_implINS_10Elf32_ShdrEEE
_ZTIN5ELFIO12section_implINS_10Elf64_ShdrEEE
_ZTIN5ELFIO12segment_implINS_10Elf32_PhdrEEE
_ZTIN5ELFIO12segment_implINS_10Elf64_PhdrEEE
_ZTIN5ELFIO15elf_header_implINS_10Elf32_EhdrEEE
_ZTIN5ELFIO15elf_header_implINS_10Elf64_EhdrEEE
_ZTIN5ELFIO7sectionE
_ZTIN5ELFIO7segmentE
_ZTISt9bad_alloc
_ZTISt9exception
_ZTSN5ELFIO10elf_headerE
_ZTSN5ELFIO12section_implINS_10Elf32_ShdrEEE
_ZTSN5ELFIO12section_implINS_10Elf64_ShdrEEE
_ZTSN5ELFIO12segment_implINS_10Elf32_PhdrEEE
_ZTSN5ELFIO12segment_implINS_10Elf64_PhdrEEE
_ZTSN5ELFIO15elf_header_implINS_10Elf32_EhdrEEE
_ZTSN5ELFIO15elf_header_implINS_10Elf64_EhdrEEE
_ZTSN5ELFIO7sectionE
_ZTSN5ELFIO7segmentE
_ZTSSt9bad_alloc
_ZTSSt9exception
_ZTVN5ELFIO12section_implINS_10Elf32_ShdrEEE
_ZTVN5ELFIO12section_implINS_10Elf64_ShdrEEE
_ZTVN5ELFIO12segment_implINS_10Elf32_PhdrEEE
_ZTVN5ELFIO12segment_implINS_10Elf64_PhdrEEE
_ZTVN5ELFIO15elf_header_implINS_10Elf32_EhdrEEE
_ZTVN5ELFIO15elf_header_implINS_10Elf64_EhdrEEE
poly8_lookup

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21aadf2e9f795cc51b6404767b4a5bb1

Headers

File Characteristics

Imports

kernel32

msvcrt

libgcc_s_seh-1

libstdc++-6

qt5core

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 89KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 9KB - Virtual size: 8KB

.pdata Size: 4KB - Virtual size: 4KB

.xdata Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 4KB

.edata Size: 20KB - Virtual size: 19KB

.idata Size: 8KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 1024B - Virtual size: 576B

.text
Size: 89KB - Virtual size: 89KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 9KB - Virtual size: 8KB

.pdata
Size: 4KB - Virtual size: 4KB

.xdata
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 20KB - Virtual size: 19KB

.idata
Size: 8KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 1024B - Virtual size: 576B