0547d37f632029d22333fd53b241c920_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0547d37f632029d22333fd53b241c920_NeikiAnalytics.exe
Size

53KB
MD5

0547d37f632029d22333fd53b241c920
SHA1

1be4393b66a32e641689ed6b854942d369c98a81
SHA256

75b7479c0397c65b9f06e4bb2628bc40c7209e921ab2f239a24670a33cdf1f9e
SHA512

b153013ce94b55227073f3bbe958bf50a06b9b2695688ce5a7da00ae40c43ec855343cff2991baefc6b8a90f016701d8246b0d9c75ae84d288562f06ffb026db
SSDEEP

768:RP444eqx15YDHzYFqc0hQs3f1fiVIZ5IpUnmB2euWAR5gI2:/qx1QAoQs3f1frZ+pUnmB2euWu53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0547d37f632029d22333fd53b241c920_NeikiAnalytics.exe

Files

0547d37f632029d22333fd53b241c920_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

0ea4cfdb44fd1a1846d489bb8f612bbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\TA_Build\bin\Release\Processor\TomoAnalysis.Pipeline.Processor.MorphOp.Opening2d.pdb

Imports

tomoanalysis.pipeline.processormodel

?ToStringListModel@IProcessor@Pipeline@TomoAnalysis@@SA?AVQVariant@@W4StringListMethod@123@AEBVQStringList@@@Z
??0IProcessor@Pipeline@TomoAnalysis@@QEAA@XZ
??1IProcessor@Pipeline@TomoAnalysis@@UEAA@XZ
?ToIntegerModel@IProcessor@Pipeline@TomoAnalysis@@SA?AVQVariant@@W4NumberMethod@123@HHH@Z

tcdatatypes

?UShortArrToImageView@TCDataConverter@@SA?AV?$shared_ptr@VImageView@iolink@@@std@@PEAGHHHQEAN@Z

tomoanalysis.data.mask

?SetResolution@BinaryMask2D@Data@TomoAnalysis@@QEAAPEAV123@AEBUResolution2D@3@@Z
?SetOrigin@BinaryMask2D@Data@TomoAnalysis@@QEAAPEAV123@AEBUResolution2D@3@@Z
?SetSize@BinaryMask2D@Data@TomoAnalysis@@QEAAPEAV123@AEBUSize2D@3@@Z
?GetData@BinaryMask2D@Data@TomoAnalysis@@UEBAPEAXXZ
?GetSize@BinaryMask2D@Data@TomoAnalysis@@UEBA?AUSize2D@3@XZ
?GetResolution@BinaryMask2D@Data@TomoAnalysis@@UEBA?AUResolution2D@3@XZ
?GetTimeStep@BinaryMask2D@Data@TomoAnalysis@@UEBAHXZ
??_DBinaryMask2D@Data@TomoAnalysis@@QEAAXXZ
??0BinaryMask2D@Data@TomoAnalysis@@QEAA@XZ
?SetData@BinaryMask2D@Data@TomoAnalysis@@QEAAPEAV123@AEBV?$shared_ptr@$$BY0A@G@std@@@Z
?SetTimeStep@BinaryMask2D@Data@TomoAnalysis@@QEAAPEAV123@H@Z

imagedev_cpp

?convertImage@imagedev@@YA?AV?$shared_ptr@VImageView@iolink@@@std@@V23@W4OutputType@ConvertImage@1@0@Z
?opening2d@imagedev@@YA?AV?$shared_ptr@VImageView@iolink@@@std@@V23@IW4Neighborhood@Opening2d@1@W4BorderPolicy@51@0@Z

tomoanalysis.componentmodel

??0IAssemblyBuilder@TomoAnalysis@@QEAA@XZ
??1IAssemblyBuilder@TomoAnalysis@@UEAA@XZ
?OnLoaded@IAssemblyBuilder@TomoAnalysis@@UEAAXXZ
?OnUnloaded@IAssemblyBuilder@TomoAnalysis@@UEAAXXZ
??0IService@TomoAnalysis@@QEAA@XZ
??1IService@TomoAnalysis@@UEAA@XZ

qt5core

?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
??4QString@@QEAAAEAV0@AEBV0@@Z
??8@YA_NAEBVQString@@0@Z
??M@YA_NAEBVQString@@0@Z
??8QString@@QEBA_NPEBD@Z
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?realloc@QListData@@QEAAXH@Z
?dispose@QListData@@QEAAXXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?append@QListData@@QEAAPEAPEAXXZ
?begin@QListData@@QEBAPEAPEAXXZ
?end@QListData@@QEBAPEAPEAXXZ
?nextNode@QMapNodeBase@@QEBAPEBU1@XZ
?freeNodeAndRebalance@QMapDataBase@@QEAAXPEAUQMapNodeBase@@@Z
?recalcMostLeftNode@QMapDataBase@@QEAAXXZ
?createNode@QMapDataBase@@QEAAPEAUQMapNodeBase@@HHPEAU2@_N@Z
?freeTree@QMapDataBase@@QEAAXPEAUQMapNodeBase@@H@Z
?createData@QMapDataBase@@SAPEAU1@XZ
?freeData@QMapDataBase@@SAXPEAU1@@Z
??1QVariant@@QEAA@XZ
?toInt@QVariant@@QEBAHPEA_N@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?shared_null@QListData@@2UData@1@B
?shared_null@QMapDataBase@@2U1@B
?staticMetaObject@QObject@@2UQMetaObject@@B
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z

vcruntime140

__current_exception
__current_exception_context
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__RTDynamicCast
__std_terminate
__std_type_info_compare
memcpy
_CxxThrowException
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcmp
strcspn

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initterm_e
terminate
_seh_filter_dll
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

kernel32

RtlVirtualUnwind
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 1024B - Virtual size: 759B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ea4cfdb44fd1a1846d489bb8f612bbc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

tomoanalysis.pipeline.processormodel

tcdatatypes

tomoanalysis.data.mask

imagedev_cpp

tomoanalysis.componentmodel

qt5core

vcruntime140

vcruntime140_1

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 6KB

.pdata Size: 2KB - Virtual size: 2KB

.qtmetad Size: 1024B - Virtual size: 759B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 428B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 6KB

.pdata
Size: 2KB - Virtual size: 2KB

.qtmetad
Size: 1024B - Virtual size: 759B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 428B