G:\TA_Build\bin\Release\Processor\TomoAnalysis.Pipeline.Processor.AI.Stardist25d.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0924841ae108e4e68fde3611ddd12710_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0924841ae108e4e68fde3611ddd12710_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
0924841ae108e4e68fde3611ddd12710_NeikiAnalytics.exe
-
Size
77KB
-
MD5
0924841ae108e4e68fde3611ddd12710
-
SHA1
3897b0d230ff57ac668095b257279e7101c7d170
-
SHA256
59032b17d3c18e9407fcc72c14a81d922735fd6ca0e389aa42eae52ef2d1348b
-
SHA512
075ea24ed14d591a6ffaf40791a09aa59f8a40107d920621d8a146498b486f507e90b07553305275b403900183c7c1fc32b6bda708690d5f91741fec8d691b3d
-
SSDEEP
768:K26B/LrAg444444444BEV+VdVyrk7MMDHzYFZMLZCsYFMHJO/DIquzFwVloaIScb:fM/sxyrc9s2ZaFieDLuziVloZ6rN56T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0924841ae108e4e68fde3611ddd12710_NeikiAnalytics.exe
Files
-
0924841ae108e4e68fde3611ddd12710_NeikiAnalytics.exe.dll windows:6 windows x64 arch:x64
9f6ca150d5d537979269b395e12961b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
tomoanalysis.pipeline.processormodel
??0IProcessor@Pipeline@TomoAnalysis@@QEAA@XZ
??1IProcessor@Pipeline@TomoAnalysis@@UEAA@XZ
?ToPathModel@IProcessor@Pipeline@TomoAnalysis@@SA?AVQVariant@@W4PathMethod@123@AEBVQStringList@@@Z
tcnumpyio
??1TCNumpyWriter@IO@TC@@UEAA@XZ
??0TCNumpyWriter@IO@TC@@QEAA@XZ
?Read@TCNumpyReader@IO@TC@@QEBA?AV?$tuple@_NV?$vector@KV?$allocator@K@std@@@std@@@std@@AEAVany@5@AEBVQString@@VNpyArrType@23@@Z
??1TCNumpyReader@IO@TC@@UEAA@XZ
?Write@TCNumpyWriter@IO@TC@@QEAA_NVany@std@@AEBVQString@@VNpyArrType@23@V?$vector@KV?$allocator@K@std@@@5@@Z
??0TCNumpyReader@IO@TC@@QEAA@XZ
tcvolumemetahelper
?LabelListFromUShortArr@VolumeMetaHelper@Algorithm@Components@TC@@SA?AV?$QList@H@@PEAGH@Z
tomoanalysis.data.mask
??_DLabelMask3D@Data@TomoAnalysis@@QEAAXXZ
??0LabelMask3D@Data@TomoAnalysis@@QEAA@XZ
?SetData@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@AEBV?$shared_ptr@$$BY0A@G@std@@@Z
?SetSize@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@AEBUSize3D@3@@Z
?SetResolution@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@AEBUResolution3D@3@@Z
?SetOrigin@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@AEBUResolution3D@3@@Z
?SetTimeStep@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@H@Z
?SetOffset@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@N@Z
?SetMaxLabel@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@H@Z
?SetLabels@LabelMask3D@Data@TomoAnalysis@@QEAAPEAV123@AEBV?$QList@H@@@Z
tomoanalysis.data.tcf
?GetTimeStep@HT3D@Data@TomoAnalysis@@UEBAHXZ
?GetData@FL3D@Data@TomoAnalysis@@UEBAPEAXXZ
?GetIntensity@FL3D@Data@TomoAnalysis@@UEBA?AUFLIntensity@3@XZ
?GetTimeStep@FL3D@Data@TomoAnalysis@@UEBAHXZ
?GetData@HT3D@Data@TomoAnalysis@@UEBAPEAXXZ
?GetRI@HT3D@Data@TomoAnalysis@@UEBA?AURIRange@3@XZ
tomoanalysis.data.image
?GetTimeStep@Float3D@Data@TomoAnalysis@@UEBAHXZ
?GetData@Float3D@Data@TomoAnalysis@@UEBAPEAXXZ
?GetRange@Float3D@Data@TomoAnalysis@@QEBA?AV?$tuple@MM@std@@XZ
tomoanalysis.componentmodel
??1IAssemblyBuilder@TomoAnalysis@@UEAA@XZ
??1IService@TomoAnalysis@@UEAA@XZ
?OnLoaded@IAssemblyBuilder@TomoAnalysis@@UEAAXXZ
?OnUnloaded@IAssemblyBuilder@TomoAnalysis@@UEAAXXZ
??0IService@TomoAnalysis@@QEAA@XZ
??0IAssemblyBuilder@TomoAnalysis@@QEAA@XZ
tcdatatypes
?FloatArrToImageView@TCDataConverter@@SA?AV?$shared_ptr@VImageView@iolink@@@std@@PEAMHHHQEAN@Z
?UShortArrToImageView@TCDataConverter@@SA?AV?$shared_ptr@VImageView@iolink@@@std@@PEAGHHHQEAN@Z
imagedev_cpp
?convertImage@imagedev@@YA?AV?$shared_ptr@VImageView@iolink@@@std@@V23@W4OutputType@ConvertImage@1@0@Z
?getSliceFromVolume3d@imagedev@@YA?AV?$shared_ptr@VImageView@iolink@@@std@@V23@W4Axis@GetSliceFromVolume3d@1@H0@Z
?resetImage@imagedev@@YA?AV?$shared_ptr@VImageView@iolink@@@std@@V23@N0@Z
?setSliceToVolume3d@imagedev@@YA?AV?$shared_ptr@VImageView@iolink@@@std@@V23@0W4Axis@SetSliceToVolume3d@1@H0@Z
qt5core
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
??1QObject@@UEAA@XZ
??0QChar@@QEAA@H@Z
??0QChar@@QEAA@UQLatin1Char@@@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
??4QString@@QEAAAEAV0@AEBV0@@Z
?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z
?replace@QString@@QEAAAEAV1@VQChar@@0W4CaseSensitivity@Qt@@@Z
??M@YA_NAEBVQString@@0@Z
??0QString@@QEAA@PEBD@Z
??8QString@@QEBA_NPEBD@Z
?toStdString@QString@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?realloc@QListData@@QEAAXH@Z
?dispose@QListData@@QEAAXXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?append@QListData@@QEAAPEAPEAXXZ
?size@QListData@@QEBAHXZ
?at@QListData@@QEBAPEAPEAXH@Z
?begin@QListData@@QEBAPEAPEAXXZ
?end@QListData@@QEBAPEAPEAXXZ
?instance@QCoreApplication@@SAPEAV1@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?nextNode@QMapNodeBase@@QEBAPEBU1@XZ
?freeNodeAndRebalance@QMapDataBase@@QEAAXPEAUQMapNodeBase@@@Z
?recalcMostLeftNode@QMapDataBase@@QEAAXXZ
?createNode@QMapDataBase@@QEAAPEAUQMapNodeBase@@HHPEAU2@_N@Z
?freeTree@QMapDataBase@@QEAAXPEAUQMapNodeBase@@H@Z
?createData@QMapDataBase@@SAPEAU1@XZ
?freeData@QMapDataBase@@SAXPEAU1@@Z
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@AEBVQStringList@@@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?remove@QFile@@SA_NAEBVQString@@@Z
??0QDir@@QEAA@AEBVQString@@@Z
??1QDir@@QEAA@XZ
?cdUp@QDir@@QEAA_NXZ
?mkdir@QDir@@QEBA_NAEBVQString@@@Z
?exists@QDir@@QEBA_NXZ
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?shared_null@QListData@@2UData@1@B
?shared_null@QMapDataBase@@2U1@B
?staticMetaObject@QObject@@2UQMetaObject@@B
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QObject@@QEAA@PEAV0@@Z
msvcp140
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
memcpy
__std_terminate
__std_exception_copy
__std_exception_destroy
__std_type_info_compare
_CxxThrowException
__std_type_info_destroy_list
__RTDynamicCast
__C_specific_handler
memmove
memset
__current_exception
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_initterm
_cexit
_crt_at_quick_exit
system
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_crt_atexit
terminate
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
api-ms-win-crt-environment-l1-1-0
_putenv
_dupenv_s
api-ms-win-crt-string-l1-1-0
strcmp
strcspn
kernel32
WaitForSingleObjectEx
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
EnterCriticalSection
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
CloseHandle
Exports
Exports
qt_plugin_instance
qt_plugin_query_metadata
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtmetad Size: 1024B - Virtual size: 651B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ