50d5da5107c639da8001299f0b8fa450_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

50d5da5107c639da8001299f0b8fa450_NeikiAnalytics
Size

55KB
MD5

50d5da5107c639da8001299f0b8fa450
SHA1

81ecbd27f522764a09f501bbaa5bf2cbfaf8374c
SHA256

1ac55dacb55376408c252a06d04b01b6b97050808bb8fc4ab4f747a4574c065d
SHA512

ceae208755e53d1a753a508f107b839e3b0980e28eb35372b9c268984f2c4c179a281dc1efd9bbed68890b410b1ab56fbd425c1eea6fe3e66aeeaacf53bfca3d
SSDEEP

768:+J9+Go5qJJzpJvOU2OZtblhQUMNbAeQBtkefNsGUK:y4G3JdpJvOUhZtbW5QBtkefNsGUK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d5da5107c639da8001299f0b8fa450_NeikiAnalytics

Files

50d5da5107c639da8001299f0b8fa450_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

11c5f8621762f8c7eed67c3bf3796d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qt5core

_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN11QMetaObject10ConnectionD1Ev
_ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject5eventEP6QEvent
_ZN7QObject9setParentEPS_
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QStringaSERKS_
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger5debugEPKcz
_ZNK14QMessageLogger7warningEPKcz
_ZNK7QStringeqE13QLatin1String

qt5network

_ZN10QTcpServer13newConnectionEv
_ZN10QTcpServer16staticMetaObjectE
_ZN10QTcpServer20waitForNewConnectionEiPb
_ZN10QTcpServer6listenERK12QHostAddresst
_ZN10QTcpServerC1EP7QObject
_ZN12QHostAddress10setAddressERK7QString
_ZN12QHostAddressC1Ev
_ZN12QHostAddressD1Ev
_ZN12QHostAddressaSENS_14SpecialAddressE
_ZN15QAbstractSocket5flushEv
_ZNK15QAbstractSocket5stateEv
_ZNK15QAbstractSocket8peerPortEv

qt5qml

_ZN25QQmlDebugServerConnection11qt_metacallEN11QMetaObject4CallEiPPv
_ZN25QQmlDebugServerConnection11qt_metacastEPKc
_ZN25QQmlDebugServerConnection16staticMetaObjectE
_ZN32QQmlDebugServerConnectionFactory11qt_metacallEN11QMetaObject4CallEiPPv
_ZN32QQmlDebugServerConnectionFactory11qt_metacastEPKc
_ZN32QQmlDebugServerConnectionFactory16staticMetaObjectE
_ZTV25QQmlDebugServerConnection
_ZTV32QQmlDebugServerConnectionFactory

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
realloc
strcmp
strlen
strncmp
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_guard_acquire
__cxa_guard_release

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/16
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11c5f8621762f8c7eed67c3bf3796d82

Headers

DLL Characteristics

File Characteristics

Imports

qt5core

qt5network

qt5qml

kernel32

msvcrt

libstdc++-6

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 256B

.rdata Size: 3KB - Virtual size: 3KB

/4 Size: 512B - Virtual size: 160B

.pdata Size: 1024B - Virtual size: 816B

.xdata Size: 1024B - Virtual size: 552B

.bss Size: - Virtual size: 304B

.edata Size: 512B - Virtual size: 119B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 832B

.reloc Size: 512B - Virtual size: 208B

/16 Size: 512B - Virtual size: 28B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 256B

.rdata
Size: 3KB - Virtual size: 3KB

/4
Size: 512B - Virtual size: 160B

.pdata
Size: 1024B - Virtual size: 816B

.xdata
Size: 1024B - Virtual size: 552B

.bss
Size: - Virtual size: 304B

.edata
Size: 512B - Virtual size: 119B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 832B

.reloc
Size: 512B - Virtual size: 208B

/16
Size: 512B - Virtual size: 28B