1d60bf36ae5f81d4530db2cb1ee52080_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1d60bf36ae5f81d4530db2cb1ee52080_NeikiAnalytics.exe
Size

91KB
MD5

1d60bf36ae5f81d4530db2cb1ee52080
SHA1

c1a2595ffb950918586f372b718e5168f0bd50e1
SHA256

be74e531b1b08b67264e848ae9e71a5d24e9c63b5de1ab35cb6db41baa25093d
SHA512

b54434b622a6b92898973f844c1e2c5dc439a3e54af0dc20dab51d950fcdaf6baafb0a04188506257d69505138bc9e1066d8c4de389401a193ea1bfd583a9b80
SSDEEP

1536:uek/RSwA3L7ejT3hDo8+WNR470XOTyTEXhBzpbptuYkJ8wnBdUqKCVJEPAU:uLrAm4Yg8Y1cUKJEPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d60bf36ae5f81d4530db2cb1ee52080_NeikiAnalytics.exe

Files

1d60bf36ae5f81d4530db2cb1ee52080_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

13690ced3c4e55aa64ccb3581225f1a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

mingwm10

__mingwthr_key_dtor

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
strcmp

qtcore4

_Z21qRegisterResourceDataiPKhS0_S0_
_Z5qFreePv
_Z7qMallocj
_Z7qMemSetPvij
_Z8qReallocPvj
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_ZN10QByteArray11shared_nullE
_ZN10QByteArray7reallocEi
_ZN10QByteArrayaSEPKc
_ZN10QByteArrayaSERKS_
_ZN11QVectorData6mallocEiiiPS_
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString4freeEPNS_4DataE
_ZN7QString9fromAsciiEPKci
_ZN7QString9fromUtf16EPKti
_ZN7QStringaSERKS_
_ZN8QSysInfo14WindowsVersionE
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZNK11QMetaObject2trEPKcS1_
_ZNK7QString11toLocal8BitEv
_ZNK8QVariant5toIntEPb

qtgui4

_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addLayoutEP7QLayoutiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1Ev
_ZN11QHBoxLayoutC1Ev
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPc
_ZN12QApplicationD1Ev
_ZN12QPainterPath6lineToERK7QPointF
_ZN12QPainterPath6moveToERK7QPointF
_ZN12QPainterPath7cubicToERK7QPointFS2_S2_
_ZN12QPainterPathC1Ev
_ZN12QPainterPathD1Ev
_ZN15QLinearGradientC1Edddd
_ZN15QRadialGradientC1Eddddd
_ZN16QConicalGradientC1Eddd
_ZN4QPenC1ERK6QBrushdN2Qt8PenStyleENS3_11PenCapStyleENS3_12PenJoinStyleE
_ZN4QPenC1Ev
_ZN4QPenD1Ev
_ZN4QPenaSERKS_
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN6QBrushC1EN2Qt11GlobalColorENS0_10BrushStyleE
_ZN6QBrushC1ERK7QPixmap
_ZN6QBrushC1ERK9QGradient
_ZN6QBrushC1Ev
_ZN6QBrushD1Ev
_ZN6QBrushaSERKS_
_ZN6QColorC1EN2Qt11GlobalColorE
_ZN6QLabel8setBuddyEP7QWidget
_ZN6QLabelC1ERK7QStringP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QPixmap4loadERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapC1Ev
_ZN7QPixmapD1Ev
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget17setBackgroundRoleEN8QPalette9ColorRoleE
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6updateEv
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setLayoutEP7QLayout
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN8QPainter10drawPixmapERK6QRectFRK7QPixmapS2_
_ZN8QPainter10drawPointsEPK6QPointi
_ZN8QPainter11drawEllipseERK5QRect
_ZN8QPainter11drawPolygonEPK6QPointiN2Qt8FillRuleE
_ZN8QPainter12drawPolylineEPK6QPointi
_ZN8QPainter13drawRoundRectERK6QRectFii
_ZN8QPainter13setRenderHintENS_10RenderHintEb
_ZN8QPainter4saveEv
_ZN8QPainter5scaleEdd
_ZN8QPainter6rotateEd
_ZN8QPainter6setPenERK4QPen
_ZN8QPainter7drawArcERK6QRectFii
_ZN8QPainter7drawPieERK6QRectFii
_ZN8QPainter7restoreEv
_ZN8QPainter8drawPathERK12QPainterPath
_ZN8QPainter8drawTextERK5QRectiRK7QStringPS0_
_ZN8QPainter8setBrushERK6QBrush
_ZN8QPainter9drawChordERK6QRectFii
_ZN8QPainter9drawLinesEPK5QLinei
_ZN8QPainter9drawRectsEPK5QRecti
_ZN8QPainter9translateERK7QPointF
_ZN8QPainterC1EP12QPaintDevice
_ZN8QPainterD1Ev
_ZN8QPolygonC1EiPKi
_ZN8QSpinBox8setRangeEii
_ZN8QSpinBoxC1EP7QWidget
_ZN9QCheckBoxC1ERK7QStringP7QWidget
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBoxC1EP7QWidget
_ZN9QGradient10setColorAtEdRK6QColor
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK8QSpinBox5valueEv
_ZNK9QComboBox12currentIndexEv
_ZNK9QComboBox5countEv
_ZNK9QComboBox8itemDataEii
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13690ced3c4e55aa64ccb3581225f1a3

Headers

File Characteristics

Imports

kernel32

mingwm10

msvcrt

qtcore4

qtgui4

Sections

.text Size: 75KB - Virtual size: 75KB

.data Size: 512B - Virtual size: 144B

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 16KB

.idata Size: 9KB - Virtual size: 8KB

.text
Size: 75KB - Virtual size: 75KB

.data
Size: 512B - Virtual size: 144B

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 16KB

.idata
Size: 9KB - Virtual size: 8KB