03a29d216eaed30db0d72cba00e75352e8b1f6808b6db935bba99189e0ebbdff_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

03a29d216eaed30db0d72cba00e75352e8b1f6808b6db935bba99189e0ebbdff_NeikiAnalytics.exe
Size

66KB
MD5

cd39dcd38b5a5096856d520e3c173c80
SHA1

4355e42c81bbc3615980064997f0e25de50979b2
SHA256

03a29d216eaed30db0d72cba00e75352e8b1f6808b6db935bba99189e0ebbdff
SHA512

5208c5d57d33b473186ccc60b12c78da02b46bbf8eadaee860caff6152bbd7ec1a0e8ff0d409f80d0e845b8211db6b3a0093a20721ccc311cb17b16f3bc4dbb3
SSDEEP

768:9DTwGEitA3iewrDTSbrCKki8qE+yiK4FpuiOnIZ/MBcxV64e2R8uSAZderdudpr6:9DVyiXDT2CBqtyi1vht16qR8gEEdpu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03a29d216eaed30db0d72cba00e75352e8b1f6808b6db935bba99189e0ebbdff_NeikiAnalytics.exe

Files

03a29d216eaed30db0d72cba00e75352e8b1f6808b6db935bba99189e0ebbdff_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

0fe3195e23cd7d2f19cda8ae08bfaf72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qslicersubjecthierarchymodulewidgets

?instance@qSlicerSubjectHierarchyPluginHandler@@SAPEAV1@XZ
?visibilityContextMenuActions@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AV?$QList@PEAVQAction@@@@XZ
?viewContextMenuActions@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AV?$QList@PEAVQAction@@@@XZ
?addNodeToSubjectHierarchy@qSlicerSubjectHierarchyAbstractPlugin@@UEAA_NPEAVvtkMRMLNode@@_J@Z
?canReparentItemInsideSubjectHierarchy@qSlicerSubjectHierarchyAbstractPlugin@@UEBAN_J0@Z
?reparentItemInsideSubjectHierarchy@qSlicerSubjectHierarchyAbstractPlugin@@UEAA_N_J0@Z
?showItemInView@qSlicerSubjectHierarchyAbstractPlugin@@UEAA_N_JPEAVvtkMRMLAbstractViewNode@@PEAVvtkIdList@@@Z
?name@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AVQString@@XZ
?setName@qSlicerSubjectHierarchyAbstractPlugin@@UEAAXVQString@@@Z
?staticMetaObject@qSlicerSubjectHierarchyAbstractPlugin@@2UQMetaObject@@B
?qt_metacall@qSlicerSubjectHierarchyAbstractPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?helpText@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?BVQString@@XZ
?showViewContextMenuActionsForItem@qSlicerSubjectHierarchyAbstractPlugin@@UEAAX_JV?$QMap@VQString@@VQVariant@@@@@Z
?showVisibilityContextMenuActionsForItem@qSlicerSubjectHierarchyAbstractPlugin@@UEAAX_J@Z
?showContextMenuActionsForItem@qSlicerSubjectHierarchyAbstractPlugin@@UEAAX_J@Z
?tooltip@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AVQString@@_J@Z
??1qSlicerSubjectHierarchyAbstractPlugin@@UEAA@XZ
??0qSlicerSubjectHierarchyAbstractPlugin@@QEAA@PEAVQObject@@@Z
?subjectHierarchyNode@qSlicerSubjectHierarchyPluginHandler@@QEBAPEAVvtkMRMLSubjectHierarchyNode@@XZ
?qt_metacast@qSlicerSubjectHierarchyAbstractPlugin@@UEAAPEAXPEBD@Z
?sceneContextMenuActions@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AV?$QList@PEAVQAction@@@@XZ
?itemContextMenuActions@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AV?$QList@PEAVQAction@@@@XZ
?getDisplayColor@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AVQColor@@_JAEAV?$QMap@HVQVariant@@@@@Z
?setDisplayColor@qSlicerSubjectHierarchyAbstractPlugin@@UEAAX_JVQColor@@V?$QMap@HVQVariant@@@@@Z
?getDisplayVisibility@qSlicerSubjectHierarchyAbstractPlugin@@UEBAH_J@Z
?setDisplayVisibility@qSlicerSubjectHierarchyAbstractPlugin@@UEAAX_JH@Z
?displayedItemName@qSlicerSubjectHierarchyAbstractPlugin@@UEBA?AVQString@@_J@Z
?editProperties@qSlicerSubjectHierarchyAbstractPlugin@@UEAAX_J@Z
?canEditProperties@qSlicerSubjectHierarchyAbstractPlugin@@UEAA_N_J@Z
?visibilityIcon@qSlicerSubjectHierarchyAbstractPlugin@@UEAA?AVQIcon@@H@Z

qt5gui

??0QIcon@@QEAA@XZ
??0QIcon@@QEAA@AEBV0@@Z
??0QIcon@@QEAA@AEBVQString@@@Z
??1QIcon@@QEAA@XZ
??4QIcon@@QEAAAEAV0@$$QEAV0@@Z

qt5core

??0QMessageLogger@@QEAA@PEBDH0@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
?fromStdString@QString@@SA?AV1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?metaObject@QObject@@UEBAPEBUQMetaObject@@XZ
??6QDebug@@QEAAAEAV0@PEBD@Z
??1QDebug@@QEAA@XZ
??1QObject@@UEAA@XZ
??0QObject@@QEAA@PEAV0@@Z
?critical@QMessageLogger@@QEBA?AVQDebug@@XZ

mrmlcore

?GetEncodingAsString@vtkMRMLTextNode@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SafeDownCast@vtkMRMLTextNode@@SAPEAV1@PEAVvtkObjectBase@@@Z
?GetItemDataNode@vtkMRMLSubjectHierarchyNode@@QEAAPEAVvtkMRMLNode@@_J@Z
?INVALID_ITEM_ID@vtkMRMLSubjectHierarchyNode@@2_JB

ctkvisualizationvtkcore

??1ctkVTKConnectionFactoryInitialize@@QEAA@XZ
??0ctkVTKConnectionFactoryInitialize@@QEAA@XZ

vtkcommon-9.2

??0vtkDebugLeaksManager@@QEAA@XZ
??1vtkDebugLeaksManager@@QEAA@XZ
??1vtkObjectFactoryRegistryCleanup@@QEAA@XZ
??0vtkObjectFactoryRegistryCleanup@@QEAA@XZ

vtksys-9.2

??1SystemToolsManager@vtksys@@QEAA@XZ
??0SystemToolsManager@vtksys@@QEAA@XZ

msvcp140

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?uncaught_exception@std@@YA_NXZ

vcruntime140

memset
_CxxThrowException
__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
__current_exception
memmove
__std_exception_destroy
__std_exception_copy
__std_terminate
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_crt_atexit
_cexit
_initterm
_initterm_e
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
IsProcessorFeaturePresent

Exports

Exports

??0qSlicerSubjectHierarchyTextsPlugin@@QEAA@PEAVQObject@@@Z
??1qSlicerSubjectHierarchyTextsPlugin@@UEAA@XZ
??_7qSlicerSubjectHierarchyTextsPlugin@@6B@
??_FqSlicerSubjectHierarchyTextsPlugin@@QEAAXXZ
?canAddNodeToSubjectHierarchy@qSlicerSubjectHierarchyTextsPlugin@@UEBANPEAVvtkMRMLNode@@_J@Z
?canOwnSubjectHierarchyItem@qSlicerSubjectHierarchyTextsPlugin@@UEBAN_J@Z
?d_func@qSlicerSubjectHierarchyTextsPlugin@@AEAAPEAVqSlicerSubjectHierarchyTextsPluginPrivate@@XZ
?d_func@qSlicerSubjectHierarchyTextsPlugin@@AEBAPEBVqSlicerSubjectHierarchyTextsPluginPrivate@@XZ
?icon@qSlicerSubjectHierarchyTextsPlugin@@UEAA?AVQIcon@@_J@Z
?metaObject@qSlicerSubjectHierarchyTextsPlugin@@UEBAPEBUQMetaObject@@XZ
?qt_metacall@qSlicerSubjectHierarchyTextsPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@qSlicerSubjectHierarchyTextsPlugin@@UEAAPEAXPEBD@Z
?qt_static_metacall@qSlicerSubjectHierarchyTextsPlugin@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?roleForPlugin@qSlicerSubjectHierarchyTextsPlugin@@UEBA?BVQString@@XZ
?staticMetaObject@qSlicerSubjectHierarchyTextsPlugin@@2UQMetaObject@@B
?tooltip@qSlicerSubjectHierarchyTextsPlugin@@UEBA?AVQString@@_J@Z
?tr@qSlicerSubjectHierarchyTextsPlugin@@SA?AVQString@@PEBD0H@Z
?trUtf8@qSlicerSubjectHierarchyTextsPlugin@@SA?AVQString@@PEBD0H@Z

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fe3195e23cd7d2f19cda8ae08bfaf72

Headers

DLL Characteristics

File Characteristics

Imports

qslicersubjecthierarchymodulewidgets

qt5gui

qt5core

mrmlcore

ctkvisualizationvtkcore

vtkcommon-9.2

vtksys-9.2

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 280B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 280B