ab8b72ac6d928eb5b839ede5a3e34780_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

ab8b72ac6d928eb5b839ede5a3e34780_NeikiAnalytics
Size

83KB
MD5

ab8b72ac6d928eb5b839ede5a3e34780
SHA1

6e8a6d2cd5ae2737547554ae2945151870d636c7
SHA256

b7bc22ccf919c04c5cfb1922ad32515f23b9af9b52bd82b3d4ddd6f2f77dbc5d
SHA512

f2268b55fe45093b2e27295ce480f71ce242c3bb0f5c5b7a30f65d656a3cddded64bda7c61b13840e9b1a3d21ed03d725a5fc8ab60a5aba0d596d225b67fbe16
SSDEEP

1536:R4bqJO3Np7XYjcOZV3Ip54dUoNubwTMbkYGIUn5QOo:R4bga7XYTEp54dmbEaGIUn5QOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab8b72ac6d928eb5b839ede5a3e34780_NeikiAnalytics

Files

ab8b72ac6d928eb5b839ede5a3e34780_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

c74de0f0ff41047b70c54b7c81c0f2d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libskgbankmodeler

_ZN22SKGImportExportManager23getImportMimeTypeFilterEv
_ZN22SKGImportExportManager23getExportMimeTypeFilterEv
_ZN15SKGDocumentBankC1Ev
_ZN22SKGImportExportManagerC1EP15SKGDocumentBankRK7QString
_ZN22SKGImportExportManager19getImportParametersEv
_ZN22SKGImportExportManager19setImportParametersERK4QMapI7QStringS1_E
_ZN22SKGImportExportManager10importFileEv
_ZN22SKGImportExportManagerD1Ev
_ZN22SKGImportExportManager10exportFileEv
_ZN15SKGDocumentBankD1Ev

libskgbasemodeler

_ZN8SKGErrorC1Ev
_ZN8SKGErrorC1EiRK7QString
_ZN8SKGErroraSERKS_
_ZN8SKGErrorD1Ev
_ZNK8SKGErrorntEv
_ZN11SKGDocument10initializeEv
_ZN17SKGTransactionMngC1EP11SKGDocumentRK7QStringP8SKGErrorib
_ZN9SKGTraces14SKGIndentTraceE
_ZN17SKGTransactionMngD1Ev
_ZNK8SKGErrorcvbEv
_ZNK8SKGError28getFullMessageWithHistoricalEv
_ZN9SKGTraces23dumpProfilingStatisticsEv
_ZNK8SKGError13getReturnCodeEv

libkdecore

_ZN16KLocalizedStringC1Ev
_Z6ki18ncPKcS0_
_ZNK16KLocalizedString4subsERK7QStringiRK5QChar
_ZN10KAboutDataC1ERK10QByteArrayS2_RK16KLocalizedStringS2_S5_NS_10LicenseKeyES5_S5_S2_S2_
_ZN16KLocalizedStringD1Ev
_ZN10KAboutData9addAuthorERK16KLocalizedStringS2_RK10QByteArrayS5_S5_
_ZN10KAboutData12setOtherTextERK16KLocalizedString
_ZN12KCmdLineArgs4initEiPPcPK10KAboutData6QFlagsINS_13StdCmdLineArgEE
_ZN15KCmdLineOptionsC1Ev
_ZN15KCmdLineOptions3addERK10QByteArrayRK16KLocalizedStringS2_
_Z5ki18nPKc
_ZN12KCmdLineArgs17addCmdLineOptionsERK15KCmdLineOptionsRK16KLocalizedStringRK10QByteArrayS8_
_ZN12KCmdLineArgs10parsedArgsERK10QByteArray
_ZNK12KCmdLineArgs5isSetERK10QByteArray
_ZNK16KLocalizedString8toStringEv
_ZNK12KCmdLineArgs9getOptionERK10QByteArray
_ZNK12KCmdLineArgs13getOptionListERK10QByteArray
_ZN12KCmdLineArgs5clearEv
_ZN15KCmdLineOptionsD1Ev
_ZN10KAboutDataD1Ev

qtcore4

_ZN7QString16fromAscii_helperEPKci
_ZN11QTextStreamC1EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamD1Ev
_ZN7QString4freeEPNS_4DataE
_Z5qFreePv
_ZN8QMapData16continueFreeDataEi
_ZN8QMapData10createDataEi
_ZN8QMapData11node_createEPPNS_4NodeEii
_ZN10QByteArrayC1EPKc
_ZN5QDate11currentDateEv
_ZNK5QDate8toStringERK7QString
_ZN10QByteArray11shared_nullE
_ZN7QString11shared_nullE
_ZNK7QStringltERKS_
_ZN7QStringaSERKS_
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEPKc
_Z5flushR11QTextStream
_Z4endlR11QTextStream

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_write
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
malloc
memcpy
realloc
signal
sprintf
strcmp
strcpy
strlen
strncmp
vfprintf

libgcc_s_sjlj-1

_Unwind_SjLj_Resume
_Unwind_SjLj_Register
_Unwind_SjLj_Unregister
_Unwind_GetTextRelBase
_Unwind_GetDataRelBase
_Unwind_GetRegionStart
_Unwind_GetLanguageSpecificData
_Unwind_GetIPInfo
_Unwind_SetGR
_Unwind_SetIP
_Unwind_DeleteException
_Unwind_SjLj_Resume_or_Rethrow
_Unwind_SjLj_RaiseException

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c74de0f0ff41047b70c54b7c81c0f2d8

Headers

File Characteristics

Imports

libskgbankmodeler

libskgbasemodeler

libkdecore

qtcore4

kernel32

msvcrt

libgcc_s_sjlj-1

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 1KB

.idata Size: 6KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 6KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B