505b35e3892f4ecf0042843da4b8a1e6350a25049c739edafeadebc6cd06503e_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

505b35e3892f4ecf0042843da4b8a1e6350a25049c739edafeadebc6cd06503e_NeikiAnalytics.exe
Size

1.7MB
MD5

ed6dd684c110722b42e7132b9266a200
SHA1

24fdf0b6ab7e7d70905f4bab58ecc1c854c92357
SHA256

505b35e3892f4ecf0042843da4b8a1e6350a25049c739edafeadebc6cd06503e
SHA512

f217a9d782e5b3b90a1d2a53137c1d783948c31442bb34c4217cb296f7892d0b470896f1d61cebe243241b3cc2b1f7a23ddccfd30de234e9eaa00cc194170409
SSDEEP

49152:rAOX7ADdq3HdSyVCq6zpe3l7iV6+KIglffx:r8Ddq3HdSyVCq6zpe3l7iV6+KIglR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
505b35e3892f4ecf0042843da4b8a1e6350a25049c739edafeadebc6cd06503e_NeikiAnalytics.exe

Files

505b35e3892f4ecf0042843da4b8a1e6350a25049c739edafeadebc6cd06503e_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bd808016cfde54917d1bb500b3da5a80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl140.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayAddRef$qqrv
@System@@DynArrayClear$qqrrpvpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayLength$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@LStrAddRef$qqrpv
@System@@LStrAsg$qqrpvpxv
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@DoneExcept$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@AsClass$qqrp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@@FillChar$qqrpvib
@System@ParamStr$qqri
@System@Move$qqrpxvpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@$xp$17System@UTF8String
@$xp$14System@TObject
@System@TObject@
@$xp$13System@string
@$xp$6Double
@$xp$11System@Byte
@$xp$7Integer
@$xp$7Boolean
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TThread@$bcdtr$qqrv
@Classes@TThread@$bcctr$qqrv
@Classes@TStringList@SetCaseSensitive$qqrxo
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@SetSorted$qqro
@Classes@TInterfacedPersistent@QueryInterface$qqsrx5_GUIDpv
@Classes@TInterfacedPersistent@AfterConstruction$qqrv
@Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TPersistent@$bdtr$qqrv
@Classes@TList@Get$qqri
@Classes@TList@Add$qqrpv
@$xp$19Classes@TStringList
@Classes@TStringList@
@$xp$19Classes@TPersistent
@Classes@TPersistent@
@$xp$13Classes@TList
@Classes@TList@
@$xp$20Classes@TNotifyEvent
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@TEncoding@$bcdtr$qqrv
@Sysutils@TLanguages@$bcdtr$qqrv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@Exception@$bcdtr$qqrv
@Sysutils@Exception@$bcctr$qqrv
@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@SetCurrentDir$qqrx20System@UnicodeString
@Sysutils@GetCurrentDir$qqrv
@Sysutils@ExpandFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@DirectoryExists$qqrx20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@IntToStr$qqri
@Sysutils@LowerCase$qqrx20System@UnicodeString
@Sysutils@TEncoding@$bcctr$qqrv
@Sysutils@Exception@
@Sysutils@TLanguages@$bcctr$qqrv
@Math@Min$qqrxixi
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Variants@@VarToReal$qqrrx8TVarData
@Variants@@VarToInteger$qqrrx8TVarData
@Variants@@VarClr$qqrr8TVarData
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Inifiles@TCustomIniFile@$bctr$qqrx20System@UnicodeString
@Inifiles@TIniFile@
@Ioutils@initialization$qqrv
@Ioutils@Finalization$qqrv
@Ioutils@TPath@$bcctr$qqrv
@Ioutils@TPath@$bcdtr$qqrv
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Timespan@TTimeSpan@$bcctr$qqrv
@Timespan@TTimeSpan@$bcdtr$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
GetVersionExW
FreeLibrary

nativexml401.bpl

@Nativexml@initialization$qqrv
@Nativexml@Finalization$qqrv
@Nativexml@Utf8CompareText$qqrx31System@%AnsiStringT$us$i65001$%t1
@Nativexml@sdWideToUtf8$qqrx20System@UnicodeString
@Nativexml@TXmlNode@SetValueUnicode$qqrx20System@UnicodeString
@Nativexml@TXmlNode@NodeByName$qqrx31System@%AnsiStringT$us$i65001$%
@Nativexml@TXmlNode@GetValueUnicode$qqrv
@Nativexml@TXmlNode@GetAttributeByName$qqrx31System@%AnsiStringT$us$i65001$%
@$xp$18Nativexml@TXmlNode
@Sddebug@initialization$qqrv
@Sddebug@Finalization$qqrv

vcl140.bpl

@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv

geometry.bpl

@Cadhelpers@TXmlNodeHelper@WritePoint$qqrx31System@%AnsiStringT$us$i65001$%rx17Cadtypes@TPoint2D
@Cadhelpers@TXmlNodeHelper@ReadPoint2D$qqrx31System@%AnsiStringT$us$i65001$%
@Cadtypes@initialization$qqrv
@Cadtypes@Finalization$qqrv
@Cadtypes@TRect2D@$bctr$qqrrx17Cadtypes@TPoint2Dt1
@Cadtypes@TRect2D@Contains$qqrrx17Cadtypes@TPoint2D
@Cadtypes@Point2D$qqrxdxd
@Cadtypes@TPoint3D@_op_Inequality$qqrrx17Cadtypes@TPoint3Dt1
@Cadtypes@TPoint3D@_op_Implicit$qqrrx17Cadtypes@TPoint2D
@Cadtypes@TPoint2D@_op_Subtraction$qqrrx17Cadtypes@TPoint2Dt1
@Cadtypes@TPoint2D@_op_Inequality$qqrrx17Cadtypes@TPoint2Dt1
@Cadtypes@TPoint2D@Normal$qqrv
@Cadtypes@TPoint2D@_op_Multiply$qqrrx17Cadtypes@TPoint2Dxd
@Cadtypes@TPoint2D@$bctr$qqrxdxd
@Cadtypes@TPoint2D@_op_Addition$qqrrx17Cadtypes@TPoint2Dt1
@Cadtypes@CompressPoints$qqrr42System@%DynamicArray$t17Cadtypes@TPoint2D%d
@Cadtypes@fSmall$qqrdd
@Cadtypes@fGreat$qqrdd
@Cadtypes@fEqual$qqrdd
@Cadtypes@Wcs0
@Cadtypes@Dcs0
@Cadtypes@Org2D
@$xp$16Cadtypes@TRect2D
@$xp$21Cadtypes@TDynPoints2D
@$xp$17Cadtypes@TPoint2D

appbase.bpl

@Fsapplc@initialization$qqrv
@Fsapplc@Finalization$qqrv
@Fsapplc@TAppSystem@RegisterLocaleProc$qqrpqqrv$v
@Fsapplc@TAppSystem@ExpandAppFile$qqr20System@UnicodeString
@Fsapplc@TAppSystem@AppDataPath$qqro
@Fsapplc@Environment$qqrv
@Fsapplc@UserConfig
@Fsapplc@MachineConfig
@Fsapplc@Locale
@Fsapplc@AppSys
@Fsconfig@initialization$qqrv
@Fsconfig@Finalization$qqrv
@Fsconfig@TMachineConfig@GetCamSteps$qqr19Fsconfig@TFsCamTypep20Fsconfig@TFsCamSteps
@Fsconfig@TOutputItemList@FindPort$qqri
@Fsconfig@TOutputItemList@DefaultPort$qqrv
@Fsconfig@TFollowerConfig@IsBCS100$qqrv
@Fsconfig@TLaserConfig@GetCO2Config$qqrv
@Fsconfig@TXmlConfig@SaveConfig$qqrv
@Fsconfig@TXmlConfig@LoadConfig$qqrv
@Fsconfig@TXmlConfig@Initialize$qqrv
@Fsconfig@TXmlConfig@GetXmlNode$qqrv
@Fsconfig@TXmlConfig@$bdtr$qqrv
@Fsconfig@TXmlConfig@$bctr$qqr20System@UnicodeString
@Fsconfig@TXmlSubConfig@UseDefAttr$qqr20System@UnicodeString
@Fsconfig@TXmlSubConfig@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Fsconfig@TXmlSubConfig@SaveConfig$qqrv
@Fsconfig@TXmlSubConfig@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Fsconfig@TXmlSubConfig@LoadConfig$qqrv
@Fsconfig@TXmlSubConfig@Initialize$qqrv
@Fsconfig@TXmlSubConfig@GetXmlNode$qqrv
@Fsconfig@TXmlSubConfig@GetProperty$qqr20System@UnicodeString
@Fsconfig@TXmlSubConfig@$bdtr$qqrv
@Fsconfig@TXmlSubConfig@$bctr$qqrp22Fsconfig@TXmlSubConfig31System@%AnsiStringT$us$i65001$%
@Fsconfig@TXmlSubConfig@AssignTo$qqrp19Classes@TPersistent
@Fsconfig@TXmlSubConfig@AddSubConfig$qqr31System@%AnsiStringT$us$i65001$%p17System@TMetaClasspv
@$xp$20Fsconfig@TFsCamSteps
@$xp$19Fsconfig@TFsCamType
@$xp$19Fsconfig@TXmlConfig
@Fsconfig@TXmlConfig@
@$xp$22Fsconfig@TXmlSubConfig
@Fsconfig@TXmlSubConfig@
@Fsstrs@initialization$qqrv
@Fsstrs@Finalization$qqrv
@Sevenzip@initialization$qqrv
@Sevenzip@Finalization$qqrv

baselib.bpl

@$xp$20Fslib@TFsEnvironment
@Fsmui@TFsLocaleResource@ReadStr$qqr20System@UnicodeStringt1r20System@UnicodeString

gks.bpl

@Cadgks@initialization$qqrv
@Cadgks@Finalization$qqrv
@Cadgks@TCADDocument@$bcdtr$qqrv
@Cadgks@TCADDocument@$bcctr$qqrv
@Cadgks@TGksFileTechParam@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Cadgks@TGksFileTechParam@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Cadgks@TGksFileTechParam@$bdtr$qqrv
@Cadgks@TGksFileTechParam@$bctr$qqrv
@Cadgks@TGksFileTechParam@AssignTo$qqrp19Classes@TPersistent
@Cadgks@TGksChannelTechParam@SpeedChanged$qqrpx27Cadgks@TGksChannelTechParam
@Cadgks@TGksChannelTechParam@SetWorkSpeed$qqrxd
@Cadgks@TGksChannelTechParam@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Cadgks@TGksChannelTechParam@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Cadgks@TGksChannelTechParam@$bctr$qqri
@Cadgks@TGksChannelTechParam@AssignTo$qqrp19Classes@TPersistent
@Cadgks@TGksObject@ToString$qqri
@Cadgks@TGksObject@SetDocument$qqrpx19Cadgks@TCADDocument
@Cadgks@DefFileTechParamClass
@$xp$24Cadgks@TGksFileTechParam
@Cadgks@TGksFileTechParam@
@$xp$27Cadgks@TGksChannelTechParam
@Cadgks@TGksChannelTechParam@
@Cadstrs@initialization$qqrv
@Cadstrs@Finalization$qqrv
@Cadio@initialization$qqrv
@Cadio@Finalization$qqrv

Exports

Exports

@$xp$18Coefunc@Coefunc__1
@$xp$18Materl@TFsMaterial
@$xp$18Materl@TFsValueDef
@$xp$19Coefunc@PCubicCoeff
@$xp$19Coefunc@TCoeffArray
@$xp$19Coefunc@TCubicCoeff
@$xp$19Coefunc@TSplineFunc
@$xp$19Materl@TFsCamParams
@$xp$21Materl@TFsMaterialLib
@$xp$23Coefunc@TDynDoubleArray
@$xp$23Coefunc@TSplineBaseFunc
@$xp$24Coefunc@TSplineBaseFuncs
@$xp$27Materl@TCutmaxFileTechParam
@$xp$30Materl@TCutMaxChannelTechParam
@$xp$35Materl@TCutMaxCoverChannelTechParam
@Coefunc@Finalization$qqrv
@Coefunc@TSplineBaseFunc@
@Coefunc@TSplineBaseFunc@$bctr$qqrv
@Coefunc@TSplineBaseFunc@$bdtr$qqrv
@Coefunc@TSplineBaseFunc@Eval$qqrdi
@Coefunc@TSplineBaseFunc@EvalCoeff$qqrdrx19Coefunc@TCubicCoeff
@Coefunc@TSplineBaseFunc@GetCoeff$qqruc
@Coefunc@TSplineBaseFunc@GetSegCount$qqrv
@Coefunc@TSplineBaseFunc@NewCoeff$qqruc
@Coefunc@TSplineFunc@
@Coefunc@TSplineFunc@$bctr$qqr42System@%DynamicArray$t17Cadtypes@TPoint2D%rx17Cadtypes@TPoint2Dt2rx16Cadtypes@TRect2D
@Coefunc@TSplineFunc@$bctr$qqrpx19Coefunc@TSplineFunc
@Coefunc@TSplineFunc@$bctr$qqrv
@Coefunc@TSplineFunc@$bdtr$qqrv
@Coefunc@TSplineFunc@AddControlPoint$qqrrx17Cadtypes@TPoint2D
@Coefunc@TSplineFunc@AddKnot$qqrd
@Coefunc@TSplineFunc@AssignTo$qqrp19Classes@TPersistent
@Coefunc@TSplineFunc@CalcBaseFunctions$qqrv
@Coefunc@TSplineFunc@Clear$qqrv
@Coefunc@TSplineFunc@ClearCtrlPoints$qqrv
@Coefunc@TSplineFunc@DeleteKnot$qqruc
@Coefunc@TSplineFunc@Edit$qqrdrx17Cadtypes@TPoint2D
@Coefunc@TSplineFunc@EditKnotPoint$qqrirx17Cadtypes@TPoint2D
@Coefunc@TSplineFunc@Eval$qqrd
@Coefunc@TSplineFunc@FitFunc$qqrv
@Coefunc@TSplineFunc@GetControlPoint$qqruc
@Coefunc@TSplineFunc@GetCtrlPointCount$qqrv
@Coefunc@TSplineFunc@GetKnotCount$qqrv
@Coefunc@TSplineFunc@GetKnotPoint$qqruc
@Coefunc@TSplineFunc@IsIn$qqrd
@Coefunc@TSplineFunc@LoadFromFile$qqr20System@UnicodeString
@Coefunc@TSplineFunc@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Coefunc@TSplineFunc@SaveToFile$qqr20System@UnicodeString
@Coefunc@TSplineFunc@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Coefunc@TSplineFunc@SegOfValue$qqrd
@Coefunc@TSplineFunc@SetKnotPoint$qqrucrx17Cadtypes@TPoint2D
@Coefunc@TSplineFunc@SolveEquation$qqr49System@%DynamicArray$t24System@%DynamicArray$td%%42System@%DynamicArray$t17Cadtypes@TPoint2D%p17Cadtypes@TPoint2D
@Coefunc@TSplineFunc@UpdateParams$qqrv
@Coefunc@TSplineFunc@UpgradeBaseFunction$qqrucucp13Classes@TList
@Coefunc@TSplineFunc@UpgradeBaseFunctions$qqrucp13Classes@TListt2
@Coefunc@initialization$qqrv
@GetPackageInfoTable
@Materl@Finalization$qqrv
@Materl@MaterialLib$qqrv
@Materl@TCutMaxChannelTechParam@
@Materl@TCutMaxChannelTechParam@$bctr$qqri
@Materl@TCutMaxChannelTechParam@$bdtr$qqrv
@Materl@TCutMaxChannelTechParam@AssignTo$qqrp19Classes@TPersistent
@Materl@TCutMaxChannelTechParam@GetCamSteps$qqr19Fsconfig@TFsCamTypep20Fsconfig@TFsCamSteps
@Materl@TCutMaxChannelTechParam@GetMaterial$qqrv
@Materl@TCutMaxChannelTechParam@GetMaterialName$qqrv
@Materl@TCutMaxChannelTechParam@GetPwmRatioFunc$qqrv
@Materl@TCutMaxChannelTechParam@GetWorkSpeed$qqrv
@Materl@TCutMaxChannelTechParam@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TCutMaxChannelTechParam@SaveToDefaultParams$qqrv
@Materl@TCutMaxChannelTechParam@SaveToDefaultParamsNode$qqr20System@UnicodeString
@Materl@TCutMaxChannelTechParam@SaveToMaterial$qqr20System@UnicodeString
@Materl@TCutMaxChannelTechParam@SaveToMaterial$qqrp18Materl@TFsMaterial
@Materl@TCutMaxChannelTechParam@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TCutMaxChannelTechParam@SetMaterialName$qqrx20System@UnicodeString
@Materl@TCutMaxChannelTechParam@SetPwmRatioFunc$qqrpx19Coefunc@TSplineFunc
@Materl@TCutMaxChannelTechParam@SetWorkSpeed$qqrxd
@Materl@TCutMaxChannelTechParam@SpeedChanged$qqrpx27Cadgks@TGksChannelTechParam
@Materl@TCutMaxChannelTechParam@UseCoverCut$qqrv
@Materl@TCutMaxChannelTechParam@UsePrepunch$qqrv
@Materl@TCutMaxCoverChannelTechParam@
@Materl@TCutMaxCoverChannelTechParam@$bctr$qqri
@Materl@TCutMaxCoverChannelTechParam@GetCamSteps$qqr19Fsconfig@TFsCamTypep20Fsconfig@TFsCamSteps
@Materl@TCutMaxCoverChannelTechParam@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TCutmaxFileTechParam@
@Materl@TCutmaxFileTechParam@CreateChannelTechParam$qqri
@Materl@TFsCamParams@
@Materl@TFsCamParams@$bctr$qqrp22Fsconfig@TXmlSubConfig31System@%AnsiStringT$us$i65001$%
@Materl@TFsCamParams@$bdtr$qqrv
@Materl@TFsCamParams@AssignTo$qqrp19Classes@TPersistent
@Materl@TFsCamParams@GetLeadInSpeed$qqrv
@Materl@TFsCamParams@GetLeadOutSpeed$qqrv
@Materl@TFsCamParams@GetParam$qqr20System@UnicodeString
@Materl@TFsCamParams@GetParamInt$qqr20System@UnicodeString
@Materl@TFsCamParams@GetUseCoverCut$qqrv
@Materl@TFsCamParams@GetWorkSpeed$qqrv
@Materl@TFsCamParams@GetXmlNode$qqrv
@Materl@TFsCamParams@Initialize$qqrv
@Materl@TFsCamParams@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TFsCamParams@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TFsCamParams@SetLeadInSpeed$qqrxd
@Materl@TFsCamParams@SetLeadOutSpeed$qqrxd
@Materl@TFsCamParams@SetWorkSpeed$qqrxd
@Materl@TFsMaterial@
@Materl@TFsMaterial@$bctr$qqr20System@UnicodeString
@Materl@TFsMaterial@$bdtr$qqrv
@Materl@TFsMaterial@GetPwmRatioFunc$qqrv
@Materl@TFsMaterial@GetRootNodeName$qqrv
@Materl@TFsMaterial@Initialize$qqrv
@Materl@TFsMaterial@LoadDefault$qqrv
@Materl@TFsMaterial@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TFsMaterial@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TFsMaterial@SetDefPwmRatioFunc$qqrxo
@Materl@TFsMaterial@SetPwmRatioFunc$qqrpx19Coefunc@TSplineFunc
@Materl@TFsMaterialLib@
@Materl@TFsMaterialLib@$bctr$qqrv
@Materl@TFsMaterialLib@$bdtr$qqrv
@Materl@TFsMaterialLib@DefaultPath$qqrv
@Materl@TFsMaterialLib@FindMaterial$qqr20System@UnicodeString
@Materl@TFsMaterialLib@FindOrNewMaterial$qqr20System@UnicodeString
@Materl@TFsMaterialLib@GetDefMaterial$qqrv
@Materl@TFsMaterialLib@GetMaterial$qqr20System@UnicodeString
@Materl@TFsMaterialLib@NewMaterial$qqr20System@UnicodeString
@Materl@TFsMaterialLib@SearchFile$qqr20System@UnicodeString
@Materl@TFsValueDef@LoadFromXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TFsValueDef@SaveToXmlNode$qqrp18Nativexml@TXmlNode
@Materl@TFsValueDef@SetValue$qqrxdxd
@Materl@initialization$qqrv
@Materlib@@GetPackageInfoTable$qqrv
@Materlib@@PackageLoad$qqrv
@Materlib@@PackageUnload$qqrv
@Materlib@initialization$qqrv
Finalize
Initialize

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd808016cfde54917d1bb500b3da5a80

Headers

File Characteristics

Imports

rtl140.bpl

kernel32

nativexml401.bpl

vcl140.bpl

geometry.bpl

appbase.bpl

baselib.bpl

gks.bpl

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 31KB

.itext Size: 512B - Virtual size: 424B

.data Size: 512B - Virtual size: 104B

.bss Size: - Virtual size: 32B

.idata Size: 14KB - Virtual size: 14KB

.edata Size: 7KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 17B

.reloc Size: 3KB - Virtual size: 2KB

.rsrc Size: 7KB - Virtual size: 7KB

.debug Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 31KB - Virtual size: 31KB

.itext
Size: 512B - Virtual size: 424B

.data
Size: 512B - Virtual size: 104B

.bss
Size: - Virtual size: 32B

.idata
Size: 14KB - Virtual size: 14KB

.edata
Size: 7KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 17B

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 7KB - Virtual size: 7KB

.debug
Size: 1.6MB - Virtual size: 1.6MB