c92389dbe729643a6c999d6ac10b5460_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

c92389dbe729643a6c999d6ac10b5460_NeikiAnalytics
Size

2.0MB
MD5

c92389dbe729643a6c999d6ac10b5460
SHA1

3e1f6494d673b46f2c175118c4df140942f4c141
SHA256

e27760a9f4095e1679f2d9926a3b3c2e1943a4a636c7f3d31cbfd12aa6cbde17
SHA512

69cab7f2f83fa687cce3866855a2d277272a19b77f0ffcde71599600810185fe384546e11fbecd108e7728ec7bc059b1f88b757e1cd42e17365245c773a74c37
SSDEEP

24576:rNcLHFq6Z2L4fo3nqQRHB7SimV5iEwbInGgBuX2KZDU3fvcZp0CdUp8lt1vRa1nJ:rsUNS40nGgLZf0ZiCupWub3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92389dbe729643a6c999d6ac10b5460_NeikiAnalytics

Files

c92389dbe729643a6c999d6ac10b5460_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

b968c44d00c4e763b27b5d95b42c62d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

borlndmm

GetAllocMemCount

xerceslib

@DOMString@$basg$qrx9DOMString
@DOMString@$bctr$qpxb
@DOMString@$bctr$qpxc
@DOMString@$bctr$qrx9DOMString
@DOMString@$bctr$qv
@DOMString@$bdtr$qv
@DOMString@transcode$qpxc
@DOM_Document@$basg$qrx12DOM_Document
@DOM_Document@$bctr$qrx12DOM_Document
@DOM_Document@$bctr$qv
@DOM_Document@$bdtr$qv
@DOM_Document@getDocumentElement$xqv
@DOM_Document@getElementsByTagName$xqrx9DOMString
@DOM_Document@importNode$qrx8DOM_Nodeo
@DOM_Element@$bdtr$qv
@DOM_Element@getElementsByTagName$xqrx9DOMString
@DOM_Node@$basg$qrx8DOM_Node
@DOM_Node@$bctr$qrx8DOM_Node
@DOM_Node@$bctr$qv
@DOM_Node@$bdtr$qv
@DOM_Node@appendChild$qrx8DOM_Node
@DOM_Node@cloneNode$xqo
@DOM_Node@getFirstChild$xqv
@DOM_Node@getParentNode$xqv
@DOM_Node@isNull$xqv
@DOM_Node@removeChild$qrx8DOM_Node
@DOM_NodeList@$basg$qrx12DOM_NodeList
@DOM_NodeList@$bctr$qv
@DOM_NodeList@$bdtr$qv
@DOM_NodeList@getLength$xqv
@DOM_NodeList@item$xqui
@XMLPlatformUtils@Initialize$qv
@XMLPlatformUtils@Terminate$qv

xmlutils

@XMLCrearDocument$q27System@%AnsiStringT$us$i0$%
@XMLCrearElementText$q12DOM_Document27System@%AnsiStringT$us$i0$%t2
@XMLCrearFill$q12DOM_Document9DOMString27System@%AnsiStringT$us$i0$%t3
@XMLGetNodeValue$q8DOM_Node
@XMLGetNodeValueUnicode$q8DOM_Node
@XMLParseFile$q27System@%AnsiStringT$us$i0$%
@XMLSaveDocument$q12DOM_Document27System@%AnsiStringT$us$i0$%o
@XMLSaveDocumentUnicode$q12DOM_Document20System@UnicodeStringo
@XMLSetNodeValue$q12DOM_Document20System@UnicodeString8DOM_Node9DOMString
@XMLSetNodeValueUnicode$q12DOM_Document20System@UnicodeString8DOM_Nodet2

fwstl

@UtfConverter@Utf8Converter@$bctr$qv
@UtfConverter@Utf8Converter@$bdele$qpv
@UtfConverter@Utf8Converter@$bdla$qpv
@UtfConverter@Utf8Converter@$bdtr$qv
@UtfConverter@Utf8Converter@ToUtf8$qpxb

advapi32

RegCloseKey
RegConnectRegistryW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW

kernel32

CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EnterCriticalSection
EnumCalendarInfoW
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCPInfoExW
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceW
GetDriveTypeW
GetExitCodeThread
GetFileAttributesW
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemInfo
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultUILanguage
GetVersion
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDebuggerPresent
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
ResumeThread
RtlUnwind
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
lstrcpynW
lstrlenW

mpr

WNetGetConnectionW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

wsock32

WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
closesocket
connect
gethostbyname
getsockname
getsockopt
htons
inet_ntoa
listen
recv
select
send
socket
bind

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrintersW
ord203
OpenPrinterW

comctl32

FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ord17
InitializeFlatSB
_TrackMouseEvent

gdi32

AbortDoc
AngleArc
Arc
ArcTo
BitBlt
Chord
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreateHalftonePalette
CreateICW
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesExW
EnumFontsW
ExcludeClipRect
ExtFloodFill
ExtTextOutW
FrameRgn
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32W
GetTextMetricsW
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
Pie
PolyBezier
PolyBezierTo
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
UnrealizeObject

msimg32

AlphaBlend

shell32

ShellExecuteW

shfolder

SHGetFolderPathW

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
CharLowerBuffW
CharLowerW
CharNextW
CharUpperBuffW
CharUpperW
CheckMenuItem
ClientToScreen
CopyIcon
CreateAcceleratorTableW
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextExW
DrawTextW
EnableMenuItem
EnableScrollBar
EnableWindow
EndMenu
EndPaint
EnumChildWindows
EnumDisplayMonitors
EnumThreadWindows
EnumWindows
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetCapture
GetClassInfoW
GetClassLongW
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMonitorInfoW
GetParent
GetPropW
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadKeyboardLayoutW
LoadStringW
MapVirtualKeyW
MapWindowPoints
MessageBoxA
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OffsetRect
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WaitMessage
WindowFromPoint

ole32

CoInitialize
CoUninitialize
OleInitialize
OleUninitialize

oleaut32

GetErrorInfo
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit

cc32110mt

@$bdele$qpv
@_CatchCleanup$qv
@_InitTermAndUnexPtrs$qv
@_ThrowExceptionLDTC$qpvt1t1t1uiuiuipuct1
@__exceptionAcquired
@setExceptionFuncAddr$qpqp17_EXCEPTION_RECORDpp4tpid$pvppqqrp17_EXCEPTION_RECORD$v
@setRaiseListFuncAddr$qpvt1
@std@%char_traits$b%@assign$qrbrxb
@std@%char_traits$c%@assign$qrcrxc
__ErrorExit
__FUnloadDelayLoadedDLL
___CRTL_MEM_GetBorMemPtrs
___CRTL_MEM_UseBorMM
___CRTL_TLS_Alloc
___CRTL_TLS_ExitThread
___CRTL_TLS_Free
___CRTL_TLS_GetValue
___CRTL_TLS_InitThread
___CRTL_TLS_SetValue
___CRTL_VCL_FPU_Hook
___VCL_add_EH
___VCL_clear_EH
___VCL_init_delayload
___VCL_init_except
___VCL_init_fpu
____ExceptionHandler
___errno
___getExceptionObject
___pfnDliFailureHook
___pfnDliNotifyHook
__argc
__argv
__argv_default_expand
__beginthread
__delayLoadHelper
__endthread
__exitargv
__fpclass
__ftol
__handle_exitargv
__handle_setargv
__handle_wexitargv
__handle_wsetargv
__isnan
__ltoupper
__matherr
__matherrl
__setargv
__streams
__wargv
__wargv_default_expand
__wexitargv
__wfnsplit
__wfopen
__wsetargv
__wstartup
_close
_fabs
_fclose
_fflush
_fgetc
_floor
_fmod
_fopen
_fprintf
_fputc
_fread
_free
_frexp
_fscanf
_fstat
_fwrite
_getcwd
_getenv
_log10
_malloc
_memcpy
_memmove
_memset
_mkdir
_open
_pow
_printf
_read
_realloc
_snprintf
_sprintf
_sscanf
_stat
_strcat
_strchr
_strlen
_strncmp
_strncpy
_strtol
_swprintf
_vfprintf
_vsnprintf
_vsnwprintf
_wcscmp
_wcscpy
_wcslen
_wcsstr
_write

Exports

Exports

@$xp$23Dxfres@TdxfDesignerForm
@$xp$24Dxfcheckbox@TdxfCheckBox
@$xp$27Dxfcheckbox@TdxfCBAlignment
@@Auxfun@Finalize
@@Auxfun@Initialize
@@Machineeditor@Finalize
@@Machineeditor@Initialize
@@Main@Finalize
@@Main@Initialize
@@Myauxfunc@Finalize
@@Myauxfunc@Initialize
@Dxfcheckbox@Finalization$qqrv
@Dxfcheckbox@TdxfCheckBox@
@Dxfcheckbox@TdxfCheckBox@$bctr$qqrp18Classes@TComponent
@Dxfcheckbox@TdxfCheckBox@$bdtr$qqrv
@Dxfcheckbox@TdxfCheckBox@CMButtonPressed$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@CMEnabledChanged$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@CMFontChanged$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@CMTextChanged$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@CalcSize$qqrv
@Dxfcheckbox@TdxfCheckBox@Click$qqrv
@Dxfcheckbox@TdxfCheckBox@DrawImage$qqrp16Graphics@TCanvasrx11Types@TRectp16Graphics@TBitmapi
@Dxfcheckbox@TdxfCheckBox@Paint$qqrv
@Dxfcheckbox@TdxfCheckBox@SetAlignment$qqr27Dxfcheckbox@TdxfCBAlignment
@Dxfcheckbox@TdxfCheckBox@SetAllowAllUp$qqro
@Dxfcheckbox@TdxfCheckBox@SetAutoSize$qqro
@Dxfcheckbox@TdxfCheckBox@SetChecked$qqro
@Dxfcheckbox@TdxfCheckBox@SetCheckedBmp$qqrp16Graphics@TBitmap
@Dxfcheckbox@TdxfCheckBox@SetDisabledCheckedBmp$qqrp16Graphics@TBitmap
@Dxfcheckbox@TdxfCheckBox@SetDisabledUnCheckedBmp$qqrp16Graphics@TBitmap
@Dxfcheckbox@TdxfCheckBox@SetGroupIndex$qqri
@Dxfcheckbox@TdxfCheckBox@SetStyle$qqri
@Dxfcheckbox@TdxfCheckBox@SetUnCheckedBmp$qqrp16Graphics@TBitmap
@Dxfcheckbox@TdxfCheckBox@UpdateExclusive$qqrv
@Dxfcheckbox@TdxfCheckBox@WMEraseBkGnd$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@WMKeyUp$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@WMKillFocus$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@WMLButtonDblClk$qqrr17Messages@TWMMouse
@Dxfcheckbox@TdxfCheckBox@WMSetFocus$qqrr17Messages@TMessage
@Dxfcheckbox@TdxfCheckBox@WMSize$qqrr16Messages@TWMSize
@Dxfcheckbox@initialization$qqrv
@Dxfres@CBBmp
@Dxfres@DesignForm
@Dxfres@DrawBmp
@Dxfres@Finalization$qqrv
@Dxfres@ImageList
@Dxfres@StandardColors
@Dxfres@SystemColors
@Dxfres@TdxfDesignerForm@
@Dxfres@TdxfDesignerForm@SelectComponent$qqrp19Classes@TPersistent
@Dxfres@initialization$qqrv
_Form1
__GetExceptDLLinfo
___CPPdebugHook
_frmMachineEditor
_xslAddCall
_xslDebugStatus
_xslDropCall
_xslHandleDebugger
_xsltAddKey
_xsltAddStackElemList
_xsltAddTemplate
_xsltAllocateExtra
_xsltAllocateExtraCtxt
_xsltApplyAttributeSet
_xsltApplyImports
_xsltApplyOneTemplate
_xsltApplyStripSpaces
_xsltApplyStylesheet
_xsltApplyStylesheetUser
_xsltApplyTemplates
_xsltAttrListTemplateProcess
_xsltAttrTemplateProcess
_xsltAttrTemplateValueProcess
_xsltAttrTemplateValueProcessNode
_xsltAttribute
_xsltCalibrateAdjust
_xsltCallTemplate
_xsltCheckExtPrefix
_xsltCheckRead
_xsltCheckWrite
_xsltChoose
_xsltCleanupGlobals
_xsltCleanupTemplates
_xsltComment
_xsltCompileAttr
_xsltCompilePattern
_xsltComputeSortResult
_xsltCopy
_xsltCopyNamespace
_xsltCopyNamespaceList
_xsltCopyOf
_xsltCopyTextString
_xsltCreateRVT
_xsltDebug
_xsltDebugDumpExtensions
_xsltDebugGetDefaultTrace
_xsltDebugSetDefaultTrace
_xsltDecimalFormatGetByName
_xsltDefaultSortFunction
_xsltDoSortFunction
_xsltDocumentComp
_xsltDocumentElem
_xsltDocumentFunction
_xsltDocumentSortFunction
_xsltElement
_xsltElementAvailableFunction
_xsltEngineVersion
_xsltEvalAVT
_xsltEvalAttrValueTemplate
_xsltEvalGlobalVariables
_xsltEvalOneUserParam
_xsltEvalStaticAttrValueTemplate
_xsltEvalTemplateString
_xsltEvalUserParams
_xsltEvalXPathPredicate
_xsltEvalXPathString
_xsltEvalXPathStringNs
_xsltExtElementLookup
_xsltExtModuleElementLookup
_xsltExtModuleElementPreComputeLookup
_xsltExtModuleFunctionLookup
_xsltExtModuleTopLevelLookup
_xsltFindDocument
_xsltFindElemSpaceHandling
_xsltFindTemplate
_xsltForEach
_xsltFormatNumberConversion
_xsltFormatNumberFunction
_xsltFreeAVTList
_xsltFreeAttributeSetsHashes
_xsltFreeCompMatchList
_xsltFreeCtxtExts
_xsltFreeDocumentKeys
_xsltFreeDocuments
_xsltFreeExts
_xsltFreeGlobalVariables
_xsltFreeKeys
_xsltFreeNamespaceAliasHashes
_xsltFreeRVTs
_xsltFreeSecurityPrefs
_xsltFreeStackElemList
_xsltFreeStyleDocuments
_xsltFreeStylePreComps
_xsltFreeStylesheet
_xsltFreeTemplateHashes
_xsltFreeTransformContext
_xsltFunctionAvailableFunction
_xsltFunctionNodeSet
_xsltGenerateIdFunction
_xsltGenericDebug
_xsltGenericDebugContext
_xsltGenericError
_xsltGenericErrorContext
_xsltGetCNsProp
_xsltGetDebuggerStatus
_xsltGetDefaultSecurityPrefs
_xsltGetExtData
_xsltGetExtInfo
_xsltGetKey
_xsltGetNamespace
_xsltGetNsProp
_xsltGetPlainNamespace
_xsltGetProfileInformation
_xsltGetQNameURI
_xsltGetQNameURI2
_xsltGetSecurityPrefs
_xsltGetSpecialNamespace
_xsltGetTemplate
_xsltGetUTF8Char
_xsltGetXIncludeDefault
_xsltIf
_xsltInitCtxtExts
_xsltInitCtxtKeys
_xsltInitElemPreComp
_xsltIsBlank
_xsltKeyFunction
_xsltLibxmlVersion
_xsltLibxsltVersion
_xsltLoadDocument
_xsltLoadStyleDocument
_xsltLoadStylesheetPI
_xsltMaxDepth
_xsltMessage
_xsltNamespaceAlias
_xsltNeedElemSpaceHandling
_xsltNewDocument
_xsltNewElemPreComp
_xsltNewSecurityPrefs
_xsltNewStyleDocument
_xsltNewStylesheet
_xsltNewTransformContext
_xsltNextImport
_xsltNormalizeCompSteps
_xsltNumber
_xsltNumberFormat
_xsltParseGlobalParam
_xsltParseGlobalVariable
_xsltParseStylesheetAttributeSet
_xsltParseStylesheetCallerParam
_xsltParseStylesheetDoc
_xsltParseStylesheetFile
_xsltParseStylesheetImport
_xsltParseStylesheetImportedDoc
_xsltParseStylesheetInclude
_xsltParseStylesheetOutput
_xsltParseStylesheetParam
_xsltParseStylesheetProcess
_xsltParseStylesheetVariable
_xsltParseTemplateContent
_xsltPreComputeExtModuleElement
_xsltPrintErrorContext
_xsltProcessingInstruction
_xsltProfileStylesheet
_xsltQuoteOneUserParam
_xsltQuoteUserParams
_xsltRegisterAllElement
_xsltRegisterAllExtras
_xsltRegisterAllFunctions
_xsltRegisterExtElement
_xsltRegisterExtFunction
_xsltRegisterExtModule
_xsltRegisterExtModuleElement
_xsltRegisterExtModuleFull
_xsltRegisterExtModuleFunction
_xsltRegisterExtModuleTopLevel
_xsltRegisterExtPrefix
_xsltRegisterExtras
_xsltRegisterPersistRVT
_xsltRegisterTestModule
_xsltRegisterTmpRVT
_xsltResolveStylesheetAttributeSet
_xsltRunStylesheet
_xsltRunStylesheetUser
_xsltSaveProfiling
_xsltSaveResultTo
_xsltSaveResultToFd
_xsltSaveResultToFile
_xsltSaveResultToFilename
_xsltSaveResultToString
_xsltSecurityAllow
_xsltSecurityForbid
_xsltSetCtxtParseOptions
_xsltSetCtxtSecurityPrefs
_xsltSetCtxtSortFunc
_xsltSetDebuggerCallbacks
_xsltSetDebuggerStatus
_xsltSetDefaultSecurityPrefs
_xsltSetGenericDebugFunc
_xsltSetGenericErrorFunc
_xsltSetSecurityPrefs
_xsltSetSortFunc
_xsltSetTransformErrorFunc
_xsltSetXIncludeDefault
_xsltShutdownCtxtExts
_xsltShutdownExts
_xsltSort
_xsltSplitQName
_xsltStyleGetExtData
_xsltStylePreCompute
_xsltSystemPropertyFunction
_xsltTemplateProcess
_xsltTestCompMatchList
_xsltText
_xsltTimestamp
_xsltTransformError
_xsltUnparsedEntityURIFunction
_xsltUnregisterExtModule
_xsltUnregisterExtModuleElement
_xsltUnregisterExtModuleFunction
_xsltUnregisterExtModuleTopLevel
_xsltValueOf
_xsltVariableLookup
_xsltXPathCompile
_xsltXPathFunctionLookup
_xsltXPathGetTransformContext
_xsltXPathVariableLookup

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 217KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b968c44d00c4e763b27b5d95b42c62d7

Headers

File Characteristics

Imports

borlndmm

xerceslib

xmlutils

fwstl

advapi32

kernel32

mpr

version

wsock32

winspool.drv

comctl32

gdi32

msimg32

shell32

shfolder

user32

ole32

oleaut32

cc32110mt

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: 217KB - Virtual size: 280KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 17KB - Virtual size: 20KB

.didata Size: 1024B - Virtual size: 4KB

.edata Size: 10KB - Virtual size: 12KB

.rsrc Size: 73KB - Virtual size: 76KB

.reloc Size: 105KB - Virtual size: 108KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 217KB - Virtual size: 280KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 17KB - Virtual size: 20KB

.didata
Size: 1024B - Virtual size: 4KB

.edata
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 73KB - Virtual size: 76KB

.reloc
Size: 105KB - Virtual size: 108KB