3063937d9be9646926a9fae435550ea87861a127f52f9a719851d8bf6280ff2d_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3063937d9be9646926a9fae435550ea87861a127f52f9a719851d8bf6280ff2d_NeikiAnalytics.exe
Size

110KB
MD5

b641d2345b7294d06f5767af3b93a090
SHA1

f05e4df18a82fc06f9f2c1c02d90fc1ba935c6ea
SHA256

3063937d9be9646926a9fae435550ea87861a127f52f9a719851d8bf6280ff2d
SHA512

27216623f5728d83fe9655fa59c3a3efebb00999780d75cffe50d06ddc8a1fad4a53cd50403259d8586e1dbbc6fd8c096c7e7f4c30001adaca626961ba529708
SSDEEP

1536:HOXaGOrIB0r4efAmPsSDEGmGpdcC08uKSXMXRE0HtNuzMTYJG:HOXB+60s4aGpdcC0RbMnHtNuY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3063937d9be9646926a9fae435550ea87861a127f52f9a719851d8bf6280ff2d_NeikiAnalytics.exe

Files

3063937d9be9646926a9fae435550ea87861a127f52f9a719851d8bf6280ff2d_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

6608540859caf54e717c2794c03cf7ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt5core

_Z13qFlagLocationPKc
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z9qt_assertPKcS0_i
_ZN10QArrayData10deallocateEPS_jj
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN8QVariantD1Ev
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK7QObject10objectNameEv

qt5gui

_ZN5QIconC1ERK7QString
_ZN5QIconD1Ev
_ZNK5QIconcv8QVariantEv

qt5widgets

_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QTableView23resizeColumnsToContentsEv
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1Ev
_ZN11QLayoutItemD2Ev
_ZN11QPushButtonC1EP7QWidget
_ZN11QSizePolicy14setControlTypeENS_11ControlTypeE
_ZN11QVBoxLayoutC1EP7QWidget
_ZN12QApplicationC1ERiPPci
_ZN12QProgressBar10setMaximumEi
_ZN12QProgressBar10setMinimumEi
_ZN12QProgressBar8setValueEi
_ZN12QProgressBarC1EP7QWidget
_ZN12QTableWidget11setRowCountEi
_ZN12QTableWidget14setColumnCountEi
_ZN12QTableWidget23setHorizontalHeaderItemEiP16QTableWidgetItem
_ZN12QTableWidget5clearEv
_ZN12QTableWidget7setItemEiiP16QTableWidgetItem
_ZN12QTableWidgetC1EP7QWidget
_ZN15QAbstractButton7setTextERK7QString
_ZN16QTableWidgetItem8setFlagsE6QFlagsIN2Qt8ItemFlagEE
_ZN16QTableWidgetItemC1ERK7QStringi
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QActionC1ERK7QStringP7QObject
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog4openEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setStatusTipERK7QString
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget17setWindowModalityEN2Qt14WindowModalityE
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget20setContextMenuPolicyEN2Qt17ContextMenuPolicyE
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN9QCheckBoxC1EP7QWidget
_ZN9QSplitter14setOrientationEN2Qt11OrientationE
_ZN9QSplitter9addWidgetEP7QWidget
_ZN9QSplitterC1EP7QWidget
_ZNK12QTableWidget11currentItemEv
_ZNK15QAbstractButton9isCheckedEv
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZTV11QSpacerItem
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv

libadm_core6

ADM_backTrack
ADM_error2
ADM_info2
ADM_usleep
ADM_warning2
_Z13ADM_getJobDirv
_Z13win32_netInitv
_Z14ADM_InitMemcpyv
_Z15ADM_initBaseDiriPPc
_Z17ADM_epochToStringy
_Z17getWindowsVersionPc
_Z17installSigHandlerv
_Z19uninstallSigHandlerv
_Z20redirectStdoutToFilev
_Z20utf8StringToWideCharPKciPw
_Z24ADM_getSecondsSinceEpochv

libadm_corejobs

_ZN6ADMJob11jobShutDownEv
_ZN6ADMJob6jobGetERSt6vectorIS_SaIS_EE
_ZN6ADMJob7jobInitEv
_ZN6ADMJob9jobDeleteERKS_
_ZN6ADMJob9jobUpdateERKS_

libadm_coresocket6

_ZN10ADM_socket19createBindAndAcceptEPj
_ZN17ADM_commandSocket11pollMessageER17ADM_socketMessage
_ZN17ADM_commandSocket14waitForConnectEj
_ZN17ADM_commandSocket9handshakeEv
_ZN17ADM_commandSocketC1Ev
_ZN17ADM_commandSocketD1Ev
_ZN17ADM_socketMessage20getPayloadAsUint32_tEPj

libadm_coreutils6

_Z9quotaInitv

libwinpthread-1

pthread_create

kernel32

CreateProcessW
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
calloc
exit
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memmove
setlocale
signal
strchr
strcmp
strerror
strlen
strncmp
_unlock
abort
atoi
vfprintf
wcslen

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister
__udivdi3
__umoddi3

libstdc++-6

_ZNSs4_Rep10_M_destroyERKSaIcE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4swapERSs
_ZNSs6appendERKSs
_ZNSs6assignERKSs
_ZNSs6insertEjPKcj
_ZNSsC1EPKcRKSaIcE
_ZNSsC1ERKSs
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_throw_bad_array_new_length
__gxx_personality_sj0

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6608540859caf54e717c2794c03cf7ad

Headers

File Characteristics

Imports

qt5core

qt5gui

qt5widgets

libadm_core6

libadm_corejobs

libadm_coresocket6

libadm_coreutils6

libwinpthread-1

kernel32

msvcrt

libgcc_s_sjlj-1

libstdc++-6

Sections

.text Size: 57KB - Virtual size: 57KB

.data Size: 512B - Virtual size: 136B

.rdata Size: 14KB - Virtual size: 14KB

.bss Size: - Virtual size: 3KB

.idata Size: 11KB - Virtual size: 10KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 57KB - Virtual size: 57KB

.data
Size: 512B - Virtual size: 136B

.rdata
Size: 14KB - Virtual size: 14KB

.bss
Size: - Virtual size: 3KB

.idata
Size: 11KB - Virtual size: 10KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 24KB - Virtual size: 24KB