bdc48f84312bb727d979a1b33d5b4ff0_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

bdc48f84312bb727d979a1b33d5b4ff0_NeikiAnalytics
Size

1.9MB
MD5

bdc48f84312bb727d979a1b33d5b4ff0
SHA1

47427278d066c6b3f750a16afbfb562b0b9e9d8e
SHA256

f0c4da3ce832647c97e202348b90bd7e9c44d54b4ecc81010a008e7c10463006
SHA512

3eb13fc762d8a8d6f8ed1bf59e6154657831a271fde4227b6f83834fe59863865c985ae1c0764f5c57a763011f6958ce5d33db8f4a7cf4b866f1b31bc4fdb324
SSDEEP

49152:GzG8nyoJipRIUOv0eVhAuykQmTfGro8FnzxE8zET:GS8nyoJipRT9iuo8Fz+2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc48f84312bb727d979a1b33d5b4ff0_NeikiAnalytics

Files

bdc48f84312bb727d979a1b33d5b4ff0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

38857288e01964fc7d42b13ba4b9bf34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qrkcore

_ZN11QrkDelegateC1EiP7QObject
_ZN11QrkSettings13save2SettingsE7QString8QVariantb
_ZN11QrkSettingsC1EP7QObject
_ZN11QrkSettingsD1Ev
_ZN12DateDelegateC1EP7QObject
_ZN13QrkPushButtonC1EP7QWidget
_ZN15DatabaseManager5clearEv
_ZN15DocumentPrinter12printReceiptEP8QPrinter11QJsonObject
_ZN15DocumentPrinter13printDocumentEP8QPrinterP13QTextDocument
_ZN15DocumentPrinterC1EP7QObject
_ZN15DocumentPrinterD1Ev
_ZN16AbstractDataBase4openEbRK7QStringS0_
_ZN16AbstractDataBase8databaseERK7QString
_ZN16DateTimeDelegateC1EP7QObject
_ZN16ReceiptItemModel11compileDataEi
_ZN16ReceiptItemModel20setCurrentReceiptNumEi
_ZN16ReceiptItemModelC1EP7QObject
_ZN16ReceiptItemModelD1Ev
_ZN17RKSignatureModule11isDEPactiveEv
_ZN23SortFilterSqlQueryModel14setFilterFlagsEN2Qt9MatchFlagE
_ZN23SortFilterSqlQueryModel15setFilterColumnERK7QString
_ZN23SortFilterSqlQueryModel6selectEv
_ZN23SortFilterSqlQueryModel8setQueryERK7QStringRK12QSqlDatabase
_ZN23SortFilterSqlQueryModel9setFilterERK7QString
_ZN23SortFilterSqlQueryModelC1EP7QObject
_ZN5Utils9getQRCodeEiRb
_ZN7Reports9getReportEibbb
_ZN8Database11getStornoIdEi
_ZN8Database15getCustomerTextEi
_ZN8Database19getActionTypeByNameERK7QString
_ZN8Database9getStornoEi
_ZN8DatabaseC1EP7QObject
_ZN8DatabaseD1Ev
_ZN8Settings5valueE7QString8QVariant

qt5core

_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QJsonValueC1ERK7QString
_ZN10QJsonValueC1Eb
_ZN10QJsonValueD1Ev
_ZN11QJsonObjectC1ERKS_
_ZN11QJsonObjectD1Ev
_ZN11QJsonObjectixERK7QString
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN13QJsonValueRefaSERK10QJsonValue
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN19QItemSelectionModel16selectionChangedERK14QItemSelectionS2_
_ZN19QItemSelectionModel16staticMetaObjectE
_ZN21QPersistentModelIndexC1ERKS_
_ZN21QPersistentModelIndexD1Ev
_ZN4QDir8homePathEv
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN8QVariantC1EPKc
_ZN8QVariantC1ERK7QString
_ZN8QVariantD1Ev
_ZN9QListData11shared_nullE
_ZN9QListData6detachEi
_ZN9QListData7disposeEPNS_4DataE
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger7warningEv
_ZNK19QItemSelectionModel15selectedIndexesEv
_ZNK7QObject10objectNameEv
_ZNK7QString3argExii5QChar
_ZNK8QVariant5toIntEPb
_ZNK8QVariant8toStringEv

qt5gui

_ZN11QTextCursor10insertHtmlERK7QString
_ZN11QTextCursor11insertImageERK6QImageRK7QString
_ZN11QTextCursor12movePositionENS_13MoveOperationENS_8MoveModeEi
_ZN11QTextCursorC1EP13QTextDocument
_ZN11QTextCursorD1Ev
_ZN5QIcon12hasThemeIconERK7QString
_ZN5QIcon7addFileERK7QStringRK5QSizeNS_4ModeENS_5StateE
_ZN5QIcon9fromThemeERK7QString
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN6QImageD1Ev
_ZN7QPixmapD1Ev
_ZNK7QPixmap7toImageEv

qt5printsupport

_ZN12QPrinterInfo14defaultPrinterEv
_ZN12QPrinterInfo17availablePrintersEv
_ZN12QPrinterInfoC1ERKS_
_ZN12QPrinterInfoD1Ev
_ZN12QPrinterInfoaSERKS_
_ZN19QPrintPreviewDialog14paintRequestedEP8QPrinter
_ZN19QPrintPreviewDialog16staticMetaObjectE
_ZN19QPrintPreviewDialogC1EP8QPrinterP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN19QPrintPreviewDialogD1Ev
_ZN8QPrinterC1ERK12QPrinterInfoNS_11PrinterModeE
_ZN8QPrinterD1Ev
_ZNK12QPrinterInfo11printerNameEv
_ZNK12QPrinterInfo6isNullEv

qt5sql

_ZN12QSqlDatabaseD1Ev
_ZN14QSqlQueryModel8setQueryERK7QStringRK12QSqlDatabase
_ZN14QSqlQueryModelC1EP7QObject
_ZN9QSqlErrorD1Ev
_ZNK14QSqlQueryModel9lastErrorEv
_ZNK9QSqlError7isValidEv
_Zls6QDebugRK9QSqlError

qt5widgets

_ZN10QBoxLayout10setStretchEii
_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QStatusBarC1EP7QWidget
_ZN10QTableView23resizeColumnsToContentsEv
_ZN10QTableViewC1EP7QWidget
_ZN11QFileDialog15getOpenFileNameEP7QWidgetRK7QStringS4_S4_PS2_6QFlagsINS_6OptionEE
_ZN11QHBoxLayoutC1Ev
_ZN11QHeaderView20setSectionResizeModeEiNS_10ResizeModeE
_ZN11QHeaderView21setStretchLastSectionEb
_ZN11QMainWindow10setMenuBarEP8QMenuBar
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow12setStatusBarEP10QStatusBar
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox8criticalEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QVBoxLayoutC1EP7QWidget
_ZN11QVBoxLayoutC1Ev
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QTextBrowserC1EP7QWidget
_ZN15QAbstractButton11setIconSizeERK5QSize
_ZN15QAbstractButton16staticMetaObjectE
_ZN15QAbstractButton7clickedEb
_ZN15QAbstractButton7setIconERK5QIcon
_ZN15QAbstractButton7setTextERK7QString
_ZN17QAbstractItemView16setSelectionModeENS_13SelectionModeE
_ZN17QAbstractItemView20setSelectionBehaviorENS_17SelectionBehaviorE
_ZN17QAbstractItemView24setItemDelegateForColumnEiP21QAbstractItemDelegate
_ZN5QMenu8setTitleERK7QString
_ZN5QMenuC1EP7QWidget
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QAction16staticMetaObjectE
_ZN7QAction7setTextERK7QString
_ZN7QAction9triggeredEb
_ZN7QActionC1EP7QObject
_ZN7QDialog4execEv
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setWindowIconERK5QIcon
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7repaintEv
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setHiddenEb
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QMenuBarC1EP7QWidget
_ZN9QTextEdit7setHtmlERK7QString
_ZNK10QTableView16horizontalHeaderEv
_ZNK17QAbstractItemView14selectionModelEv
_ZNK17QAbstractItemView5modelEv
_ZNK5QMenu10menuActionEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QTextEdit8documentEv
_ZTV11QSpacerItem
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strcmp
strlen
strncmp
abort
vfprintf

shell32

CommandLineToArgvW

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister

libstdc++-6

_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_rethrow
__gxx_personality_sj0

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

38857288e01964fc7d42b13ba4b9bf34

Headers

File Characteristics

Imports

qrkcore

qt5core

qt5gui

qt5printsupport

qt5sql

qt5widgets

kernel32

msvcrt

shell32

libgcc_s_sjlj-1

libstdc++-6

Sections

.text Size: 33KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 72B

.rdata Size: 1.8MB - Virtual size: 1.8MB

.bss Size: - Virtual size: 1008B

.idata Size: 14KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 98KB - Virtual size: 98KB

.text
Size: 33KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 72B

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.bss
Size: - Virtual size: 1008B

.idata
Size: 14KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 98KB - Virtual size: 98KB