1967e42d9819da70441511e201483900_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1967e42d9819da70441511e201483900_NeikiAnalytics.exe
Size

229KB
MD5

1967e42d9819da70441511e201483900
SHA1

999782a74e8d0bca8204228d92d226539d66be03
SHA256

2acbbab9f44c5f1b57862f04049731d8caab6d16af61c49fcdcf8bc370cc0e18
SHA512

162d145db9f51242ebf1be6b79aeffd912623ae789ab3165fd8323931ef1189bc63c1870fe88cea84fb8d92956c2074a45201a2302487ea7dd85a3b732d8e594
SSDEEP

6144:KAS65v+Es/n1V7tZPLaTmBmmmWmmhmmmA444444445q7UPJ2hA3B:KASEv+Es/nrPLaTmBmmmWmmhmmmA444I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1967e42d9819da70441511e201483900_NeikiAnalytics.exe

Files

1967e42d9819da70441511e201483900_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

529cf14c87bea3e546b22f4093122cdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

averbase

_ZN20AVerInterProcessLock4lockEv
_ZN20AVerInterProcessLock6unlockEv
_ZN20AVerInterProcessLockC1E7QString
_ZN20AVerInterProcessLockD1Ev
_ZN9LogSystem11setLogLevelENS_8LogLevelE
_ZN9LogSystem15getSysLogSystemEv
_ZN9LogSystem20registerLoggedModuleE7QString
_ZN9LogSystem3logEiNS_8LogLevelE7QStringPc
_ZN9LogSystem7stopLogEv
_ZN9LogSystem8startLogEv
_ZN9LogSystem9setLoggerEP9SysLogger

averservice

_ZN12AVerInfinity10BaseServer16broadcastMessageEtt10QByteArray
_ZN12AVerInfinity11BaseService11responseAckEv
_ZN12AVerInfinity11BaseService11responseIntEi
_ZN12AVerInfinity11BaseService12responseBoolEb
_ZN12AVerInfinity11BaseService14responseStringE7QString
_ZN12AVerInfinity11BaseService15helloedAndReadyEv
_ZN12AVerInfinity11BaseService15sessionShutdownEv
_ZN12AVerInfinity11BaseService16broadcastMessageEt10QByteArray
_ZN12AVerInfinity11BaseService20responseNotSupportedEv
_ZN12AVerInfinity11BaseService4sendEt10QByteArray
_ZN12AVerInfinity11BaseService6closedEv
_ZN12AVerInfinity11BaseService8isActiveEv
_ZN12AVerInfinity11BaseServiceC2ERNS_13ServerSessionEt
_ZN12AVerInfinity11BaseServiceD2Ev
_ZN12AVerInfinity17NormalLocalServer11qt_metacallEN11QMetaObject4CallEiPPv
_ZN12AVerInfinity17NormalLocalServer11qt_metacastEPKc
_ZN12AVerInfinity17NormalLocalServer16staticMetaObjectE
_ZN12AVerInfinity17NormalLocalServer7startupEv
_ZN12AVerInfinity17NormalLocalServer8shutdownEv
_ZN12AVerInfinity17NormalLocalServerC2E7QStringb
_ZN12AVerInfinity17NormalLocalServerD2Ev
_ZN12AVerInfinity19BaseDiagnoseService13handleRestartEv
_ZN12AVerInfinity19BaseDiagnoseService14handleActivateEv
_ZN12AVerInfinity19BaseDiagnoseService20handleIncomingPacketEt10QByteArray
_ZN12AVerInfinity19BaseDiagnoseService25getAppliedProtocolVersionE5QListIjE
_ZN12AVerInfinity19BaseDiagnoseServiceC2ERNS_13ServerSessionEtb
_ZN12AVerInfinity19BaseDiagnoseServiceD2Ev
_ZN12AVerInfinity17NormalLocalServer16staticMetaObjectE

kernel32

CloseHandle
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

mingwm10

__mingwthr_key_dtor

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
fputs
free
fwrite
malloc
realloc
signal
sprintf
strcmp
strcpy

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info

qtcore4

_Z5qFreePv
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray11shared_nullE
_ZN10QByteArray7reallocEi
_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QDataStreamC1ERK10QByteArray
_ZN11QDataStreamD1Ev
_ZN11QDataStreamlsEb
_ZN11QDataStreamlsEi
_ZN11QDataStreamrsERb
_ZN11QDataStreamrsERi
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStream20setAutoDetectUnicodeEb
_ZN11QTextStream8readLineEx
_ZN11QTextStream8setCodecEPKc
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication4exitEi
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN4QDir8rootPathEv
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN4QDiraSERKS_
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN7QLocale6systemEv
_ZN7QLocaleC1ERKS_
_ZN7QLocaleC1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10disconnectEPKS_PKcS1_S3_
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN8QMapData10createDataEi
_ZN8QMapData11node_createEPPNS_4NodeEii
_ZN8QMapData11node_deleteEPPNS_4NodeEiS1_
_ZN8QMapData11shared_nullE
_ZN8QMapData16continueFreeDataEi
_ZN8QVariantC1EPKc
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Eb
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QFileInfoC1ERKS_
_ZN9QFileInfoD1Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QSettings8setValueERK7QStringRK8QVariant
_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject
_ZN9QSettingsD1Ev
_ZNK4QDir12absolutePathEv
_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK4QDir6existsEv
_ZNK4QDir6mkpathERK7QString
_ZNK7QLocale4nameEv
_ZNK7QObject10metaObjectEv
_ZNK7QObject10objectNameEv
_ZNK7QString11toLocal8BitEv
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
_ZNK7QStringltERKS_
_ZNK8QVariant5toIntEPb
_ZNK8QVariant6toBoolEv
_ZNK8QVariant8toStringEv
_ZNK9QFileInfo5isDirEv
_ZNK9QFileInfo8fileNameEv
_ZNK9QSettings5valueERK7QStringRK8QVariant
_ZlsR11QDataStreamRK7QLocale
_ZlsR11QDataStreamRK7QString
_ZrsR11QDataStreamR7QLocale
_ZrsR11QDataStreamR7QString

qtgui4

_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN16QDesktopServices15storageLocationENS_16StandardLocationE
_ZN6QColor10invalidateEv
_ZN6QColor6setRgbEiiii
_ZN6QColoraSERKS_
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setSizePolicyE11QSizePolicy
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMaximumSizeEii
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZNK6QColor3redEv
_ZNK6QColor4blueEv
_ZNK6QColor5alphaEv
_ZNK6QColor5greenEv
_ZNK7QWidget10sizePolicyEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__
_ZlsR11QDataStreamRK6QColor
_ZrsR11QDataStreamR6QColor

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 152B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

529cf14c87bea3e546b22f4093122cdd

Headers

File Characteristics

Imports

averbase

averservice

kernel32

mingwm10

msvcrt

libgcc_s_dw2-1

qtcore4

qtgui4

Sections

.text Size: 168KB - Virtual size: 168KB

.data Size: 35KB - Virtual size: 34KB

.rdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 152B

.idata Size: 13KB - Virtual size: 12KB

.text
Size: 168KB - Virtual size: 168KB

.data
Size: 35KB - Virtual size: 34KB

.rdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 152B

.idata
Size: 13KB - Virtual size: 12KB