17253aafdcd207896805eda7bb59d180_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

17253aafdcd207896805eda7bb59d180_NeikiAnalytics.exe
Size

3.9MB
MD5

17253aafdcd207896805eda7bb59d180
SHA1

d133f8e34877817e24d97ab2b8443c80af2f212c
SHA256

4961c24b9358c2df20d7a987bfcdc19212e634608824c682bc32050872c49b07
SHA512

0c89dd149a68a4767cce14e6a9d7df9c6309ed1618459ff06f091f7ad5aca5b41fa9055158706bdf145371de061241ed839cecdff0c108961ab5c83228344928
SSDEEP

98304:A8/Otbi73qzKYBqam0kkLqooOwTHFY5Sg8+R:A8/ibi7aKKqxpkLqhFY5oS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17253aafdcd207896805eda7bb59d180_NeikiAnalytics.exe

Files

17253aafdcd207896805eda7bb59d180_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

7639927e9a1f15ba1c127c81b06e1726

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
FindNextFileA
FindFirstFileA
WriteConsoleW
SetEndOfFile
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
FindClose
MultiByteToWideChar
SetFileAttributesA
Module32Next
DeleteFileA
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapReAlloc
GetTimeZoneInformation
CreateProcessW
GetExitCodeProcess
SetStdHandle
CreateDirectoryW
GetFileAttributesExW
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
MoveFileExW
DeleteFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
ReleaseMutex
GetCurrentDirectoryW
GetStdHandle
ExitProcess
GetFullPathNameW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileType
GetFileInformationByHandle
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
GetSystemInfo
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RtlUnwind
RaiseException
SetLastError
SetFilePointerEx
WaitNamedPipeW
PeekNamedPipe
GetModuleFileNameW
GetCurrentThreadId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateFileW
IsProcessorFeaturePresent
HeapValidate
GetTickCount
GetCurrentDirectoryA
CreateMutexA
GetModuleFileNameA
GlobalFree
lstrlenA
GetPrivateProfileStringA
MoveFileA
TryAcquireSRWLockExclusive
GetExitCodeThread
CompareStringW
WaitForSingleObjectEx
OpenProcess
SetThreadPriority
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLocalTime
GetFileAttributesA
CreateDirectoryA
GetProcessHeap
HeapFree
GetCPInfo
GetModuleHandleW
GetSystemTimeAsFileTime
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
QueryPerformanceFrequency
QueryPerformanceCounter
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetSystemDirectoryA
GetModuleHandleA
WriteFile
ReadFile
GetFileSize
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OutputDebugStringA
GlobalAlloc
HeapAlloc
DeviceIoControl
CloseHandle
CreateThread
CreateFileA

user32

DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
MessageBoxA
CharNextW
MonitorFromPoint
GetMonitorInfoA
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
LoadStringA
TranslateMessage
ChangeDisplaySettingsA
ReleaseCapture
SetCapture
GetCapture
ShowWindow
ClientToScreen
SetCursorPos
LoadImageA
DestroyCursor
SetCursor
ShowCursor
GetKeyState
SystemParametersInfoA
LoadIconA
FindWindowA
ScreenToClient
OffsetRect
GetCursorPos
GetSystemMetrics
GetAsyncKeyState
SetWindowPos
PostQuitMessage
PeekMessageA
LoadCursorA
AdjustWindowRectEx
GetMenu
RegisterClassA
CharPrevExA
CharNextExA
SetWindowLongA
GetWindowLongA
UpdateWindow
SetFocus
MoveWindow
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
GetClientRect
FillRect
SetRect
GetMessageA

gdi32

EnumFontFamiliesExA
GetStockObject
DeleteObject
DeleteDC
SelectObject
SetBkColor
SetBkMode
SetTextColor
CreateDIBSection
TextOutA
CreateFontIndirectA
GetCharABCWidthsFloatW
GetTextExtentPoint32W
TextOutW
GetDeviceCaps
GetPixel
StretchBlt
GetTextExtentPoint32A
CreateSolidBrush
CreateCompatibleDC
PatBlt

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

OleUninitialize
OleInitialize
CoGetClassObject
OleSetContainedObject
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx

winmm

timeGetDevCaps
timeGetTime
timeEndPeriod
timeBeginPeriod

d3d8

Direct3DCreate8

python27

PyImport_AddModule
PyRun_StringFlags
Py_Initialize
Py_SetProgramName
PyErr_Fetch
PyModule_GetDict
PyDict_SetItemString
Py_BuildValue
PyModule_AddIntConstant
Py_InitModule4
PyLong_AsLong
PyTuple_Size
PyTuple_GetItem
PyDict_GetItemString
PyArg_ParseTuple
PyString_AsString
PyThreadState_Get
PyTuple_New
PyTuple_SetItem
PyLong_FromLongLong
PyList_New
PyList_Append
Py_IncRef
PyInt_AsLong
PyDict_Next
PyDict_Size
PyErr_SetString
PyExc_RuntimeError
PyString_FromString
PyInt_FromLong
Py_Finalize
PyModule_AddStringConstant
PyImport_ImportModule
PyString_InternFromString
PyObject_GetAttrString
PyObject_GetAttr
PyCallable_Check
PyLong_AsLongLong
PyFloat_AsDouble
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyObject_CallObject
PyNumber_Check
_Py_NoneStruct

iphlpapi

GetAdaptersInfo
GetPerAdapterInfo

imm32

ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmNotifyIME

devil

ilConvertImage
ilLoad
ilGetInteger
ilGenImages
ilDeleteImages
ilBindImage
ilInit
ilEnable
ilOriginFunc
ilShutDown
ilSave
ilTexImage
ilSetPixels
ilCopyPixels

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

granny2

_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyGetWorldPose4x4@8
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetTotalTypeSize@4
_GrannyGetMeshVertexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshIndexCount@4
_GrannyGetSourceModel@4
_GrannyFindTrackGroupForModel@12
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyBeginControlledAnimation@8
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannySetTrackGroupLOD@16
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
GrannyPNT332VertexType
_GrannyDeformVertices@24

mss32

_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_loop_count@8
_AIL_3D_sample_status@4
_AIL_3D_sample_volume@4
_AIL_auto_update_3D_position@8
_AIL_end_3D_sample@4
_AIL_mem_free_lock@4

speedtreert

?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z

dinput8

DirectInput8Create

ws2_32

WSAStartup
gethostbyname
inet_addr
htons
WSACleanup
recv
WSAGetLastError
socket
send
select
__WSAFDIsSet
ioctlsocket
connect
closesocket

ddraw

DirectDrawCreate

bcrypt

BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGenRandom

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit

Exports

Exports

??0Config@libconfig@@QAE@XZ
??0ConfigException@libconfig@@QAE@$$QAV01@@Z
??0ConfigException@libconfig@@QAE@ABV01@@Z
??0ConfigException@libconfig@@QAE@XZ
??0FileIOException@libconfig@@QAE@$$QAV01@@Z
??0FileIOException@libconfig@@QAE@ABV01@@Z
??0FileIOException@libconfig@@QAE@XZ
??0ParseException@libconfig@@AAE@PBDH0@Z
??0ParseException@libconfig@@QAE@ABV01@@Z
??0Setting@libconfig@@AAE@PAUconfig_setting_t@@@Z
??0SettingException@libconfig@@IAE@ABVSetting@1@@Z
??0SettingException@libconfig@@IAE@ABVSetting@1@H@Z
??0SettingException@libconfig@@IAE@ABVSetting@1@PBD@Z
??0SettingException@libconfig@@IAE@PBD@Z
??0SettingException@libconfig@@QAE@ABV01@@Z
??0SettingNameException@libconfig@@AAE@ABVSetting@1@PBD@Z
??0SettingNameException@libconfig@@QAE@$$QAV01@@Z
??0SettingNameException@libconfig@@QAE@ABV01@@Z
??0SettingNotFoundException@libconfig@@AAE@ABVSetting@1@H@Z
??0SettingNotFoundException@libconfig@@AAE@ABVSetting@1@PBD@Z
??0SettingNotFoundException@libconfig@@AAE@PBD@Z
??0SettingNotFoundException@libconfig@@QAE@$$QAV01@@Z
??0SettingNotFoundException@libconfig@@QAE@ABV01@@Z
??0SettingTypeException@libconfig@@AAE@ABVSetting@1@@Z
??0SettingTypeException@libconfig@@AAE@ABVSetting@1@H@Z
??0SettingTypeException@libconfig@@AAE@ABVSetting@1@PBD@Z
??0SettingTypeException@libconfig@@QAE@$$QAV01@@Z
??0SettingTypeException@libconfig@@QAE@ABV01@@Z
??1Config@libconfig@@UAE@XZ
??1ConfigException@libconfig@@UAE@XZ
??1FileIOException@libconfig@@UAE@XZ
??1ParseException@libconfig@@UAE@XZ
??1Setting@libconfig@@UAE@XZ
??1SettingException@libconfig@@UAE@XZ
??1SettingNameException@libconfig@@UAE@XZ
??1SettingNotFoundException@libconfig@@UAE@XZ
??1SettingTypeException@libconfig@@UAE@XZ
??4ConfigException@libconfig@@QAEAAV01@$$QAV01@@Z
??4ConfigException@libconfig@@QAEAAV01@ABV01@@Z
??4FileIOException@libconfig@@QAEAAV01@$$QAV01@@Z
??4FileIOException@libconfig@@QAEAAV01@ABV01@@Z
??4ParseException@libconfig@@QAEAAV01@ABV01@@Z
??4Setting@libconfig@@QAEAAV01@ABN@Z
??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4Setting@libconfig@@QAEAAV01@AB_J@Z
??4Setting@libconfig@@QAEAAV01@H@Z
??4Setting@libconfig@@QAEAAV01@J@Z
??4Setting@libconfig@@QAEAAV01@M@Z
??4Setting@libconfig@@QAEAAV01@PBD@Z
??4Setting@libconfig@@QAEAAV01@_N@Z
??4SettingException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingNameException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingNameException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingNotFoundException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingNotFoundException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingTypeException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingTypeException@libconfig@@QAEAAV01@ABV01@@Z
??ASetting@libconfig@@QBEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??ASetting@libconfig@@QBEAAV01@H@Z
??ASetting@libconfig@@QBEAAV01@PBD@Z
??BSetting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??BSetting@libconfig@@QBEHXZ
??BSetting@libconfig@@QBEIXZ
??BSetting@libconfig@@QBEJXZ
??BSetting@libconfig@@QBEKXZ
??BSetting@libconfig@@QBEMXZ
??BSetting@libconfig@@QBENXZ
??BSetting@libconfig@@QBEPBDXZ
??BSetting@libconfig@@QBE_JXZ
??BSetting@libconfig@@QBE_KXZ
??BSetting@libconfig@@QBE_NXZ
??_7Config@libconfig@@6B@
??_7ConfigException@libconfig@@6B@
??_7FileIOException@libconfig@@6B@
??_7ParseException@libconfig@@6B@
??_7Setting@libconfig@@6B@
??_7SettingException@libconfig@@6B@
??_7SettingNameException@libconfig@@6B@
??_7SettingNotFoundException@libconfig@@6B@
??_7SettingTypeException@libconfig@@6B@
?ConfigDestructor@Config@libconfig@@CAXPAX@Z
?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z
?assertType@Setting@libconfig@@ABEXW4Type@12@@Z
?c_str@Setting@libconfig@@QBEPBDXZ
?exists@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Config@libconfig@@QBE_NPBD@Z
?exists@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Setting@libconfig@@QBE_NPBD@Z
?getAutoConvert@Config@libconfig@@QBE_NXZ
?getDefaultFormat@Config@libconfig@@QBE?AW4Format@Setting@2@XZ
?getError@ParseException@libconfig@@QBEPBDXZ
?getFile@ParseException@libconfig@@QBEPBDXZ
?getFormat@Setting@libconfig@@QBE?AW4Format@12@XZ
?getIncludeDir@Config@libconfig@@QBEPBDXZ
?getIndex@Setting@libconfig@@QBEHXZ
?getLength@Setting@libconfig@@QBEHXZ
?getLine@ParseException@libconfig@@QBEHXZ
?getName@Setting@libconfig@@QBEPBDXZ
?getParent@Setting@libconfig@@QAEAAV12@XZ
?getParent@Setting@libconfig@@QBEABV12@XZ
?getPath@Setting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getPath@SettingException@libconfig@@QBEPBDXZ
?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ
?getSourceFile@Setting@libconfig@@QBEPBDXZ
?getSourceLine@Setting@libconfig@@QBEIXZ
?getTabWidth@Config@libconfig@@QBEGXZ
?getType@Setting@libconfig@@QBE?AW4Type@12@XZ
?handleError@Config@libconfig@@ABEXXZ
?isAggregate@Setting@libconfig@@QBE_NXZ
?isArray@Setting@libconfig@@QBE_NXZ
?isGroup@Setting@libconfig@@QBE_NXZ
?isList@Setting@libconfig@@QBE_NXZ
?isNumber@Setting@libconfig@@QBE_NXZ
?isRoot@Setting@libconfig@@QBE_NXZ
?isScalar@Setting@libconfig@@QBE_NXZ
?lookup@Config@libconfig@@QBEAAVSetting@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookup@Config@libconfig@@QBEAAVSetting@2@PBD@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAI@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAM@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAN@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAPBD@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_K@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_N@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAI@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAM@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAN@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAPBD@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_K@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_N@Z
?read@Config@libconfig@@QAEXPAU_iobuf@@@Z
?readFile@Config@libconfig@@QAEXPBD@Z
?readString@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readString@Config@libconfig@@QAEXPBD@Z
?remove@Setting@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?remove@Setting@libconfig@@QAEXI@Z
?remove@Setting@libconfig@@QAEXPBD@Z
?setAutoConvert@Config@libconfig@@QAEX_N@Z
?setDefaultFormat@Config@libconfig@@QAEXW4Format@Setting@2@@Z
?setFormat@Setting@libconfig@@QAEXW4Format@12@@Z
?setIncludeDir@Config@libconfig@@QAEXPBD@Z
?setTabWidth@Config@libconfig@@QAEXG@Z
?what@FileIOException@libconfig@@UBEPBDXZ
?what@ParseException@libconfig@@UBEPBDXZ
?what@SettingException@libconfig@@UBEPBDXZ
?what@SettingNameException@libconfig@@UBEPBDXZ
?what@SettingNotFoundException@libconfig@@UBEPBDXZ
?what@SettingTypeException@libconfig@@UBEPBDXZ
?wrapSetting@Setting@libconfig@@CAAAV12@PAUconfig_setting_t@@@Z
?write@Config@libconfig@@QBEXPAU_iobuf@@@Z
?writeFile@Config@libconfig@@QAEXPBD@Z

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 523KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7639927e9a1f15ba1c127c81b06e1726

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

d3d8

python27

iphlpapi

imm32

devil

version

granny2

mss32

speedtreert

dinput8

ws2_32

ddraw

bcrypt

oleaut32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 523KB - Virtual size: 523KB

.data Size: 191KB - Virtual size: 704KB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 305KB - Virtual size: 304KB

.reloc Size: 133KB - Virtual size: 132KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 523KB - Virtual size: 523KB

.data
Size: 191KB - Virtual size: 704KB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 305KB - Virtual size: 304KB

.reloc
Size: 133KB - Virtual size: 132KB