40cd6e9231d9210a626abb24758f0af0_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

40cd6e9231d9210a626abb24758f0af0_NeikiAnalytics
Size

116KB
MD5

40cd6e9231d9210a626abb24758f0af0
SHA1

84b90e6b7adbe866a3d5b8939be531b83871cfa9
SHA256

2f6405c958cff81d45c5aa0ce4562df8a00a37e1f7ea2520bed02432ac8c84a8
SHA512

fe1426f2ec995af4d6caee8404f395bcf69f5ac20f36f45af0240071953c9921cc6dbe636909347775ea50ae5160223e8e7d0217438422b9e8ce41ceb1324a5c
SSDEEP

1536:BIp69COtVoEQb8uATN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQHsE:BeOA9ouu2lQBV+UdE+rECWp7hK9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40cd6e9231d9210a626abb24758f0af0_NeikiAnalytics

Files

40cd6e9231d9210a626abb24758f0af0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

f3744eb810a496694c9429481e17235c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

qmsl_msvc6r

QLIB_NV_LoadNVDefinitionFile
QLIB_NV_WriteNVsToQCN
QLIB_NV_WriteNVsToMobile
QLIB_NV_LoadWriteFilter
QLIB_NV_LoadNVsFromMobile
QLIB_NV_LoadReadFilter
QLIB_NV_LoadNVDataTypeDictinary
QLIB_DownloadQcnFile
QLIB_UploadQcnFile
QLIB_NV_SetTargetSupportMultiSIM
QLIB_NV_GetNVValueStringByEfsFilename
QLIB_NV_GetNVDefinitionByEfsFilename
QLIB_NV_GetNVEfsFilenames
QLIB_NV_GetNumOfNVEfsDefinition
QLIB_FTM_RFNV_WRITE
QLIB_NV_LoadNVsFromQCN
QLIB_NV_GetNumOfNVDefinition
QLIB_NV_GetNVDataTypeDefinition
QLIB_NV_GetNVDefinitionByIndex
QLIB_NV_GetNVValueStringByIndex
QLIB_NV_GetNVValueStringLengthByIndex
QLIB_DIAG_SPC_F
QLIB_QPHONEMS_UploadEmmcUserParitionImage
QLIB_QPHONEMS_SwitchToDownloadMode
QLIB_QPHONEMS_DLoad_Reset
QLIB_DIAG_EXT_BUILD_ID_F
QLIB_QPHONEMS_SetFactoryToken
QLIB_NV_ClearNVValues
QLIB_DIAG_NV_READ_EXT_F
QLIB_DIAG_NV_WRITE_EXT_F
QLIB_DIAG_NV_WRITE_F
QLIB_DIAG_NV_READ_F
QLIB_EFS2_SyncWithWait
QLIB_SendSync
QLIB_DIAG_CONTROL_F
QLIB_GetPhoneOperatingMode
QLIB_ConnectServerWithWait
QLIB_ConnectServer
QLIB_FlushRxBuffer
QLIB_IsPhoneConnected
QLIB_DisconnectAllServers
QLIB_DisconnectServer
QLIB_SetLibraryMode
QLIB_SetTargetType
QLIB_GetAvailablePhonesPortList

mfc42

ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1168
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord1575
ord1176
ord1253
ord2725
ord815
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord800
ord6648
ord535
ord939
ord858
ord2818
ord537
ord825
ord801
ord823
ord1200
ord540
ord5861
ord6143
ord541
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord1116
ord4079

msvcrt

??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
memmove
strstr
atoi
fopen
fputs
fclose
strncmp
sprintf
__CxxFrameHandler
free

kernel32

Sleep
LocalAlloc
LocalFree

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

Exports

Exports

QCOM_Connect
QCOM_DLoad_ResetPhone
QCOM_Disconnect
QCOM_DisconnectAll
QCOM_EmmcUpgradeSoftware
QCOM_GetPhoneMode
QCOM_GetPhoneVersion
QCOM_ImeiReadFromPhone
QCOM_ImeiWriteToPhone
QCOM_InitLib
QCOM_QcnCheckFile
QCOM_QcnLoadFromFile
QCOM_QcnLoadNvXmlFile
QCOM_QcnLoadOperation
QCOM_QcnWriteToPhone
QCOM_ReadAllNvramFromPhone
QCOM_ReadNvramFromPhone
QCOM_RtreReadFromPhone
QCOM_RtreWriteToPhone
QCOM_SendSyncString
QCOM_SetFactoryToken
QCOM_SetPhoneMode
QCOM_SwitchToDownloadMode
QCOM_SyncWithWait
QCOM_UploadQcnFile
QCOM_WriteNvramToPhone

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3744eb810a496694c9429481e17235c

Headers

File Characteristics

Imports

qmsl_msvc6r

mfc42

msvcrt

kernel32

msvcp60

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 4KB - Virtual size: 1KB