102dc067546fa3342942807db34af5e8a96a133b48b4dc52e1a7ad4ce9c356bd_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

102dc067546fa3342942807db34af5e8a96a133b48b4dc52e1a7ad4ce9c356bd_NeikiAnalytics.exe
Size

2.9MB
MD5

1f5dcb90bf59c69d6c51d1ee25b0b450
SHA1

b0ac3de12d08863cf7ceaedb969ef7f93f6e9ecd
SHA256

102dc067546fa3342942807db34af5e8a96a133b48b4dc52e1a7ad4ce9c356bd
SHA512

289ef540475f960b3af039c4438f31535084bd7d69caac7bd904ad5b279a282e4f7dd9320976c5e06aedba1ddb200bc594172e81b7dcbc4c3c375582d2054e60
SSDEEP

49152:1Knw9zLHFPFiIvZFc6K9HS9cWsT+7yZKJY8Qyjt+3Yb:1bZ3N9cWsY+

Score

1^/10

Malware Config

Signatures

Files

102dc067546fa3342942807db34af5e8a96a133b48b4dc52e1a7ad4ce9c356bd_NeikiAnalytics.exe
.dll windows:4 windows x64 arch:x64

6f4bce54ded124fc3ec14c13d682cf5c

Code Sign

05:b0:ff
Certificate

Issuer

OU=Equifax Secure Certificate Authority,O=Equifax,C=US

Not Before

16/02/2006, 18:01

Not After

19/02/2016, 18:01

Subject

CN=Intel External Basic Policy CA,O=Intel Corporation,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:95:25:ab:00:00:00:00:01:c8
Certificate

Issuer

CN=Intel External Basic Issuing CA 3A,O=Intel Corporation,C=US

Not Before

28/08/2006, 17:05

Not After

27/08/2009, 17:05

Subject

CN=\ Intel(R) Software Development Products\ ,O=Intel Corporation

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:2c:94:89:00:00:00:00:00:05
Certificate

Issuer

CN=Intel External Basic Policy CA,O=Intel Corporation,C=US

Not Before

22/03/2006, 22:22

Not After

22/03/2012, 22:32

Subject

CN=Intel External Basic Issuing CA 3A,O=Intel Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:31:f9:dd:72:30:d8:ae:36:f8:a3:64:0e:38:ea:5f:06:a3:57:bc
Signer

Actual PE Digest

50:31:f9:dd:72:30:d8:ae:36:f8:a3:64:0e:38:ea:5f:06:a3:57:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
HeapSize
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlVirtualUnwind
RtlLookupFunctionEntry
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetThreadLocale
FormatMessageA
CreateFileA

ippcoreem64t-6.0

ippGetNumCoresOnDie
ippGetNumThreads
ippFree
ippMalloc
ippGetMaxCacheSizeB
ownGetNumThreads

libiomp5md

ord138
ord145
ord141
ord707
ord706
ord106
ord124
ord144
ord126
ord148
ord150

Exports

Exports

ippcvGetLibVersion
ippiAbsDiffC_16u_C1R
ippiAbsDiffC_32f_C1R
ippiAbsDiffC_8u_C1R
ippiAbsDiff_16u_C1R
ippiAbsDiff_32f_C1R
ippiAbsDiff_8u_C1R
ippiAbsDiff_8u_C3R
ippiAddProduct_16u32f_C1IMR
ippiAddProduct_16u32f_C1IR
ippiAddProduct_32f_C1IMR
ippiAddProduct_32f_C1IR
ippiAddProduct_8s32f_C1IMR
ippiAddProduct_8s32f_C1IR
ippiAddProduct_8u32f_C1IMR
ippiAddProduct_8u32f_C1IR
ippiAddSquare_16u32f_C1IMR
ippiAddSquare_16u32f_C1IR
ippiAddSquare_32f_C1IMR
ippiAddSquare_32f_C1IR
ippiAddSquare_8s32f_C1IMR
ippiAddSquare_8s32f_C1IR
ippiAddSquare_8u32f_C1IMR
ippiAddSquare_8u32f_C1IR
ippiAddWeighted_16u32f_C1IMR
ippiAddWeighted_16u32f_C1IR
ippiAddWeighted_32f_C1IMR
ippiAddWeighted_32f_C1IR
ippiAddWeighted_8s32f_C1IMR
ippiAddWeighted_8s32f_C1IR
ippiAddWeighted_8u32f_C1IMR
ippiAddWeighted_8u32f_C1IR
ippiAdd_16u32f_C1IMR
ippiAdd_16u32f_C1IR
ippiAdd_32f_C1IMR
ippiAdd_8s32f_C1IMR
ippiAdd_8s32f_C1IR
ippiAdd_8u32f_C1IMR
ippiAdd_8u32f_C1IR
ippiApplyHaarClassifier_32f_C1R
ippiApplyHaarClassifier_32s32f_C1R
ippiApplyHaarClassifier_32s_C1RSfs
ippiApplyMixedHaarClassifier_32f_C1R
ippiApplyMixedHaarClassifier_32s32f_C1R
ippiApplyMixedHaarClassifier_32s_C1RSfs
ippiBoundSegments_16u_C1IR
ippiBoundSegments_8u_C1IR
ippiCannyGetSize
ippiCanny_16s8u_C1R
ippiCanny_32f8u_C1R
ippiCopySubpixIntersect_16u32f_C1R
ippiCopySubpixIntersect_16u_C1R
ippiCopySubpixIntersect_32f_C1R
ippiCopySubpixIntersect_8u16u_C1R_Sfs
ippiCopySubpixIntersect_8u32f_C1R
ippiCopySubpixIntersect_8u_C1R
ippiCopySubpix_16u32f_C1R
ippiCopySubpix_16u_C1R
ippiCopySubpix_32f_C1R
ippiCopySubpix_8u16u_C1R_Sfs
ippiCopySubpix_8u32f_C1R
ippiCopySubpix_8u_C1R
ippiCreateMapCameraUndistort_32f_C1R
ippiDilateBorderReplicate_32f_C1R
ippiDilateBorderReplicate_32f_C3R
ippiDilateBorderReplicate_32f_C4R
ippiDilateBorderReplicate_8u_C1R
ippiDilateBorderReplicate_8u_C3R
ippiDilateBorderReplicate_8u_C4R
ippiDistanceTransform_3x3_8u16u_C1R
ippiDistanceTransform_3x3_8u32f_C1R
ippiDistanceTransform_3x3_8u_C1IR
ippiDistanceTransform_3x3_8u_C1R
ippiDistanceTransform_5x5_8u16u_C1R
ippiDistanceTransform_5x5_8u32f_C1R
ippiDistanceTransform_5x5_8u_C1IR
ippiDistanceTransform_5x5_8u_C1R
ippiEigenValsVecsGetBufferSize_32f_C1R
ippiEigenValsVecsGetBufferSize_8u32f_C1R
ippiEigenValsVecs_32f_C1R
ippiEigenValsVecs_8u32f_C1R
ippiErodeBorderReplicate_32f_C1R
ippiErodeBorderReplicate_32f_C3R
ippiErodeBorderReplicate_32f_C4R
ippiErodeBorderReplicate_8u_C1R
ippiErodeBorderReplicate_8u_C3R
ippiErodeBorderReplicate_8u_C4R
ippiFastMarchingGetBufferSize_8u32f_C1R
ippiFastMarching_8u32f_C1R
ippiFilterColumnPipelineGetBufferSize_16s8s_C1R
ippiFilterColumnPipelineGetBufferSize_16s8s_C3R
ippiFilterColumnPipelineGetBufferSize_16s8u_C1R
ippiFilterColumnPipelineGetBufferSize_16s8u_C3R
ippiFilterColumnPipelineGetBufferSize_16s_C1R
ippiFilterColumnPipelineGetBufferSize_16s_C3R
ippiFilterColumnPipelineGetBufferSize_32f_C1R
ippiFilterColumnPipelineGetBufferSize_32f_C3R
ippiFilterColumnPipelineGetBufferSize_Low_16s_C1R
ippiFilterColumnPipelineGetBufferSize_Low_16s_C3R
ippiFilterColumnPipeline_16s8s_C1R
ippiFilterColumnPipeline_16s8s_C3R
ippiFilterColumnPipeline_16s8u_C1R
ippiFilterColumnPipeline_16s8u_C3R
ippiFilterColumnPipeline_16s_C1R
ippiFilterColumnPipeline_16s_C3R
ippiFilterColumnPipeline_32f_C1R
ippiFilterColumnPipeline_32f_C3R
ippiFilterColumnPipeline_Low_16s_C1R
ippiFilterColumnPipeline_Low_16s_C3R
ippiFilterGaussBorder_32f_C1R
ippiFilterGaussGetBufferSize_32f_C1R
ippiFilterLaplacianBorder_32f_C1R
ippiFilterLaplacianBorder_8u16s_C1R
ippiFilterLaplacianBorder_8u8s_C1R
ippiFilterLaplacianGetBufferSize_32f_C1R
ippiFilterLaplacianGetBufferSize_8u16s_C1R
ippiFilterLaplacianGetBufferSize_8u8s_C1R
ippiFilterLowpassBorder_32f_C1R
ippiFilterLowpassBorder_8u_C1R
ippiFilterLowpassGetBufferSize_32f_C1R
ippiFilterLowpassGetBufferSize_8u_C1R
ippiFilterMaxBorderReplicate_32f_C1R
ippiFilterMaxBorderReplicate_32f_C3R
ippiFilterMaxBorderReplicate_32f_C4R
ippiFilterMaxBorderReplicate_8u_C1R
ippiFilterMaxBorderReplicate_8u_C3R
ippiFilterMaxBorderReplicate_8u_C4R
ippiFilterMaxGetBufferSize_32f_C1R
ippiFilterMaxGetBufferSize_32f_C3R
ippiFilterMaxGetBufferSize_32f_C4R
ippiFilterMaxGetBufferSize_8u_C1R
ippiFilterMaxGetBufferSize_8u_C3R
ippiFilterMaxGetBufferSize_8u_C4R
ippiFilterMinBorderReplicate_32f_C1R
ippiFilterMinBorderReplicate_32f_C3R
ippiFilterMinBorderReplicate_32f_C4R
ippiFilterMinBorderReplicate_8u_C1R
ippiFilterMinBorderReplicate_8u_C3R
ippiFilterMinBorderReplicate_8u_C4R
ippiFilterMinGetBufferSize_32f_C1R
ippiFilterMinGetBufferSize_32f_C3R
ippiFilterMinGetBufferSize_32f_C4R
ippiFilterMinGetBufferSize_8u_C1R
ippiFilterMinGetBufferSize_8u_C3R
ippiFilterMinGetBufferSize_8u_C4R
ippiFilterRowBorderPipelineGetBufferSize_16s_C1R
ippiFilterRowBorderPipelineGetBufferSize_16s_C3R
ippiFilterRowBorderPipelineGetBufferSize_32f_C1R
ippiFilterRowBorderPipelineGetBufferSize_32f_C3R
ippiFilterRowBorderPipelineGetBufferSize_8u16s_C1R
ippiFilterRowBorderPipelineGetBufferSize_8u16s_C3R
ippiFilterRowBorderPipelineGetBufferSize_Low_16s_C1R
ippiFilterRowBorderPipelineGetBufferSize_Low_16s_C3R
ippiFilterRowBorderPipeline_16s_C1R
ippiFilterRowBorderPipeline_16s_C3R
ippiFilterRowBorderPipeline_32f_C1R
ippiFilterRowBorderPipeline_32f_C3R
ippiFilterRowBorderPipeline_8u16s_C1R
ippiFilterRowBorderPipeline_8u16s_C3R
ippiFilterRowBorderPipeline_Low_16s_C1R
ippiFilterRowBorderPipeline_Low_16s_C3R
ippiFilterScharrHorizBorder_32f_C1R
ippiFilterScharrHorizBorder_8u16s_C1R
ippiFilterScharrHorizBorder_8u8s_C1R
ippiFilterScharrHorizGetBufferSize_32f_C1R
ippiFilterScharrHorizGetBufferSize_8u16s_C1R
ippiFilterScharrHorizGetBufferSize_8u8s_C1R
ippiFilterScharrVertBorder_32f_C1R
ippiFilterScharrVertBorder_8u16s_C1R
ippiFilterScharrVertBorder_8u8s_C1R
ippiFilterScharrVertGetBufferSize_32f_C1R
ippiFilterScharrVertGetBufferSize_8u16s_C1R
ippiFilterScharrVertGetBufferSize_8u8s_C1R
ippiFilterSobelCrossBorder_32f_C1R
ippiFilterSobelCrossBorder_8u16s_C1R
ippiFilterSobelCrossBorder_8u8s_C1R
ippiFilterSobelCrossGetBufferSize_32f_C1R
ippiFilterSobelCrossGetBufferSize_8u16s_C1R
ippiFilterSobelCrossGetBufferSize_8u8s_C1R
ippiFilterSobelHorizBorder_32f_C1R
ippiFilterSobelHorizBorder_8u16s_C1R
ippiFilterSobelHorizBorder_8u8s_C1R
ippiFilterSobelHorizGetBufferSize_32f_C1R
ippiFilterSobelHorizGetBufferSize_8u16s_C1R
ippiFilterSobelHorizGetBufferSize_8u8s_C1R
ippiFilterSobelHorizSecondBorder_32f_C1R
ippiFilterSobelHorizSecondBorder_8u16s_C1R
ippiFilterSobelHorizSecondBorder_8u8s_C1R
ippiFilterSobelHorizSecondGetBufferSize_32f_C1R
ippiFilterSobelHorizSecondGetBufferSize_8u16s_C1R
ippiFilterSobelHorizSecondGetBufferSize_8u8s_C1R
ippiFilterSobelNegVertBorder_32f_C1R
ippiFilterSobelNegVertBorder_8u16s_C1R
ippiFilterSobelNegVertBorder_8u8s_C1R
ippiFilterSobelNegVertGetBufferSize_32f_C1R
ippiFilterSobelNegVertGetBufferSize_8u16s_C1R
ippiFilterSobelNegVertGetBufferSize_8u8s_C1R
ippiFilterSobelVertBorder_32f_C1R
ippiFilterSobelVertBorder_8u16s_C1R
ippiFilterSobelVertBorder_8u8s_C1R
ippiFilterSobelVertGetBufferSize_32f_C1R
ippiFilterSobelVertGetBufferSize_8u16s_C1R
ippiFilterSobelVertGetBufferSize_8u8s_C1R
ippiFilterSobelVertSecondBorder_32f_C1R
ippiFilterSobelVertSecondBorder_8u16s_C1R
ippiFilterSobelVertSecondBorder_8u8s_C1R
ippiFilterSobelVertSecondGetBufferSize_32f_C1R
ippiFilterSobelVertSecondGetBufferSize_8u16s_C1R
ippiFilterSobelVertSecondGetBufferSize_8u8s_C1R
ippiFindPeaks3x3GetBufferSize_32f_C1R
ippiFindPeaks3x3GetBufferSize_32s_C1R
ippiFindPeaks3x3_32f_C1R
ippiFindPeaks3x3_32s_C1R
ippiFloodFillGetSize
ippiFloodFillGetSize_Grad
ippiFloodFill_4Con_16u_C1IR
ippiFloodFill_4Con_16u_C3IR
ippiFloodFill_4Con_32f_C1IR
ippiFloodFill_4Con_32f_C3IR
ippiFloodFill_4Con_8u_C1IR
ippiFloodFill_4Con_8u_C3IR
ippiFloodFill_8Con_16u_C1IR
ippiFloodFill_8Con_16u_C3IR
ippiFloodFill_8Con_32f_C1IR
ippiFloodFill_8Con_32f_C3IR
ippiFloodFill_8Con_8u_C1IR
ippiFloodFill_8Con_8u_C3IR
ippiFloodFill_Grad4Con_16u_C1IR
ippiFloodFill_Grad4Con_16u_C3IR
ippiFloodFill_Grad4Con_32f_C1IR
ippiFloodFill_Grad4Con_32f_C3IR
ippiFloodFill_Grad4Con_8u_C1IR
ippiFloodFill_Grad4Con_8u_C3IR
ippiFloodFill_Grad8Con_16u_C1IR
ippiFloodFill_Grad8Con_16u_C3IR
ippiFloodFill_Grad8Con_32f_C1IR
ippiFloodFill_Grad8Con_32f_C3IR
ippiFloodFill_Grad8Con_8u_C1IR
ippiFloodFill_Grad8Con_8u_C3IR
ippiFloodFill_Range4Con_16u_C1IR
ippiFloodFill_Range4Con_16u_C3IR
ippiFloodFill_Range4Con_32f_C1IR
ippiFloodFill_Range4Con_32f_C3IR
ippiFloodFill_Range4Con_8u_C1IR
ippiFloodFill_Range4Con_8u_C3IR
ippiFloodFill_Range8Con_16u_C1IR
ippiFloodFill_Range8Con_16u_C3IR
ippiFloodFill_Range8Con_32f_C1IR
ippiFloodFill_Range8Con_32f_C3IR
ippiFloodFill_Range8Con_8u_C1IR
ippiFloodFill_Range8Con_8u_C3IR
ippiForegroundGaussianFree_8u_C1R
ippiForegroundGaussianFree_8u_C3R
ippiForegroundGaussianInitAlloc_8u_C1R
ippiForegroundGaussianInitAlloc_8u_C3R
ippiForegroundGaussian_8u_C1R
ippiForegroundGaussian_8u_C3R
ippiForegroundHistogramFree_8u_C1R
ippiForegroundHistogramFree_8u_C3R
ippiForegroundHistogramInitAlloc_8u_C1R
ippiForegroundHistogramInitAlloc_8u_C3R
ippiForegroundHistogramUpdate_8u_C1R
ippiForegroundHistogramUpdate_8u_C3R
ippiForegroundHistogram_8u_C1R
ippiForegroundHistogram_8u_C3R
ippiGenSobelKernel_16s
ippiGenSobelKernel_32f
ippiGetDistanceTransformMask
ippiGetDistanceTransformMask_32f
ippiGetDistanceTransformMask_32s
ippiGetHaarClassifierSize_32f
ippiGetHaarClassifierSize_32s
ippiGetPyramidDownROI
ippiGetPyramidUpROI
ippiGradientColorToGray_16u_C3C1R
ippiGradientColorToGray_32f_C3C1R
ippiGradientColorToGray_8u_C3C1R
ippiGrayDilateBorder_32f_C1R
ippiGrayDilateBorder_8u_C1R
ippiGrayErodeBorder_32f_C1R
ippiGrayErodeBorder_8u_C1R
ippiHaarClassifierFree_32f
ippiHaarClassifierFree_32s
ippiHaarClassifierInitAlloc_32f
ippiHaarClassifierInitAlloc_32s
ippiHoughLineGetSize_8u_C1R
ippiHoughLine_8u32f_C1R
ippiHoughLine_Region_8u32f_C1R
ippiInpaintFree_8u_C1R
ippiInpaintFree_8u_C3R
ippiInpaintInitAlloc_8u_C1R
ippiInpaintInitAlloc_8u_C3R
ippiInpaint_8u_C1R
ippiInpaint_8u_C3R
ippiIntegral_8u32f_C1R
ippiIntegral_8u32s_C1R
ippiLabelMarkersGetBufferSize_16u_C1R
ippiLabelMarkersGetBufferSize_8u_C1R
ippiLabelMarkers_16u_C1IR
ippiLabelMarkers_8u_C1IR
ippiMean_16u_C1MR
ippiMean_16u_C3CMR
ippiMean_32f_C1MR
ippiMean_32f_C3CMR
ippiMean_8s_C1MR
ippiMean_8s_C3CMR
ippiMean_8u_C1MR
ippiMean_8u_C3CMR
ippiMean_StdDev_16u_C1MR
ippiMean_StdDev_16u_C1R
ippiMean_StdDev_16u_C3CMR
ippiMean_StdDev_16u_C3CR
ippiMean_StdDev_32f_C1MR
ippiMean_StdDev_32f_C1R
ippiMean_StdDev_32f_C3CMR
ippiMean_StdDev_32f_C3CR
ippiMean_StdDev_8s_C1MR
ippiMean_StdDev_8s_C1R
ippiMean_StdDev_8s_C3CMR
ippiMean_StdDev_8s_C3CR
ippiMean_StdDev_8u_C1MR
ippiMean_StdDev_8u_C1R
ippiMean_StdDev_8u_C3CMR
ippiMean_StdDev_8u_C3CR
ippiMinEigenValGetBufferSize_32f_C1R
ippiMinEigenValGetBufferSize_8u32f_C1R
ippiMinEigenVal_32f_C1R
ippiMinEigenVal_8u32f_C1R
ippiMinMaxIndx_16u_C1MR
ippiMinMaxIndx_16u_C1R
ippiMinMaxIndx_16u_C3CMR
ippiMinMaxIndx_16u_C3CR
ippiMinMaxIndx_32f_C1MR
ippiMinMaxIndx_32f_C1R
ippiMinMaxIndx_32f_C3CMR
ippiMinMaxIndx_32f_C3CR
ippiMinMaxIndx_8s_C1MR
ippiMinMaxIndx_8s_C1R
ippiMinMaxIndx_8s_C3CMR
ippiMinMaxIndx_8s_C3CR
ippiMinMaxIndx_8u_C1MR
ippiMinMaxIndx_8u_C1R
ippiMinMaxIndx_8u_C3CMR
ippiMinMaxIndx_8u_C3CR
ippiMorphAdvFree
ippiMorphAdvGetSize_32f_C1R
ippiMorphAdvGetSize_32f_C3R
ippiMorphAdvGetSize_32f_C4R
ippiMorphAdvGetSize_8u_C1R
ippiMorphAdvGetSize_8u_C3R
ippiMorphAdvGetSize_8u_C4R
ippiMorphAdvInitAlloc_32f_C1R
ippiMorphAdvInitAlloc_32f_C3R
ippiMorphAdvInitAlloc_32f_C4R
ippiMorphAdvInitAlloc_8u_C1R
ippiMorphAdvInitAlloc_8u_C3R
ippiMorphAdvInitAlloc_8u_C4R
ippiMorphAdvInit_32f_C1R
ippiMorphAdvInit_32f_C3R
ippiMorphAdvInit_32f_C4R
ippiMorphAdvInit_8u_C1R
ippiMorphAdvInit_8u_C3R
ippiMorphAdvInit_8u_C4R
ippiMorphBlackhatBorder_32f_C1R
ippiMorphBlackhatBorder_32f_C3R
ippiMorphBlackhatBorder_32f_C4R
ippiMorphBlackhatBorder_8u_C1R
ippiMorphBlackhatBorder_8u_C3R
ippiMorphBlackhatBorder_8u_C4R
ippiMorphCloseBorder_32f_C1R
ippiMorphCloseBorder_32f_C3R
ippiMorphCloseBorder_32f_C4R
ippiMorphCloseBorder_8u_C1R
ippiMorphCloseBorder_8u_C3R
ippiMorphCloseBorder_8u_C4R
ippiMorphGradientBorder_32f_C1R
ippiMorphGradientBorder_32f_C3R
ippiMorphGradientBorder_32f_C4R
ippiMorphGradientBorder_8u_C1R
ippiMorphGradientBorder_8u_C3R
ippiMorphGradientBorder_8u_C4R
ippiMorphGrayFree_32f_C1R
ippiMorphGrayFree_8u_C1R
ippiMorphGrayGetSize_32f_C1R
ippiMorphGrayGetSize_8u_C1R
ippiMorphGrayInitAlloc_32f_C1R
ippiMorphGrayInitAlloc_8u_C1R
ippiMorphGrayInit_32f_C1R
ippiMorphGrayInit_8u_C1R
ippiMorphOpenBorder_32f_C1R
ippiMorphOpenBorder_32f_C3R
ippiMorphOpenBorder_32f_C4R
ippiMorphOpenBorder_8u_C1R
ippiMorphOpenBorder_8u_C3R
ippiMorphOpenBorder_8u_C4R
ippiMorphReconstructDilate_32f_C1IR
ippiMorphReconstructDilate_8u_C1IR
ippiMorphReconstructErode_32f_C1IR
ippiMorphReconstructErode_8u_C1IR
ippiMorphReconstructGetBufferSize_32f_C1
ippiMorphReconstructGetBufferSize_8u_C1
ippiMorphTophatBorder_32f_C1R
ippiMorphTophatBorder_32f_C3R
ippiMorphTophatBorder_32f_C4R
ippiMorphTophatBorder_8u_C1R
ippiMorphTophatBorder_8u_C3R
ippiMorphTophatBorder_8u_C4R
ippiMorphologyFree
ippiMorphologyGetSize_32f_C1R
ippiMorphologyGetSize_32f_C3R
ippiMorphologyGetSize_32f_C4R
ippiMorphologyGetSize_8u_C1R
ippiMorphologyGetSize_8u_C3R
ippiMorphologyGetSize_8u_C4R
ippiMorphologyInitAlloc_32f_C1R
ippiMorphologyInitAlloc_32f_C3R
ippiMorphologyInitAlloc_32f_C4R
ippiMorphologyInitAlloc_8u_C1R
ippiMorphologyInitAlloc_8u_C3R
ippiMorphologyInitAlloc_8u_C4R
ippiMorphologyInit_32f_C1R
ippiMorphologyInit_32f_C3R
ippiMorphologyInit_32f_C4R
ippiMorphologyInit_8u_C1R
ippiMorphologyInit_8u_C3R
ippiMorphologyInit_8u_C4R
ippiNormDiff_Inf_16u_C1MR
ippiNormDiff_Inf_16u_C3CMR
ippiNormDiff_Inf_32f_C1MR
ippiNormDiff_Inf_32f_C3CMR
ippiNormDiff_Inf_8s_C1MR
ippiNormDiff_Inf_8s_C3CMR
ippiNormDiff_Inf_8u_C1MR
ippiNormDiff_Inf_8u_C3CMR
ippiNormDiff_L1_16u_C1MR
ippiNormDiff_L1_16u_C3CMR
ippiNormDiff_L1_32f_C1MR
ippiNormDiff_L1_32f_C3CMR
ippiNormDiff_L1_8s_C1MR
ippiNormDiff_L1_8s_C3CMR
ippiNormDiff_L1_8u_C1MR
ippiNormDiff_L1_8u_C3CMR
ippiNormDiff_L2_16u_C1MR
ippiNormDiff_L2_16u_C3CMR
ippiNormDiff_L2_32f_C1MR
ippiNormDiff_L2_32f_C3CMR
ippiNormDiff_L2_8s_C1MR
ippiNormDiff_L2_8s_C3CMR
ippiNormDiff_L2_8u_C1MR
ippiNormDiff_L2_8u_C3CMR
ippiNormRel_Inf_16u_C1MR
ippiNormRel_Inf_16u_C3CMR
ippiNormRel_Inf_32f_C1MR
ippiNormRel_Inf_32f_C3CMR
ippiNormRel_Inf_8s_C1MR
ippiNormRel_Inf_8s_C3CMR
ippiNormRel_Inf_8u_C1MR
ippiNormRel_Inf_8u_C3CMR
ippiNormRel_L1_16u_C1MR
ippiNormRel_L1_16u_C3CMR
ippiNormRel_L1_32f_C1MR
ippiNormRel_L1_32f_C3CMR
ippiNormRel_L1_8s_C1MR
ippiNormRel_L1_8s_C3CMR
ippiNormRel_L1_8u_C1MR
ippiNormRel_L1_8u_C3CMR
ippiNormRel_L2_16u_C1MR
ippiNormRel_L2_16u_C3CMR
ippiNormRel_L2_32f_C1MR
ippiNormRel_L2_32f_C3CMR
ippiNormRel_L2_8s_C1MR
ippiNormRel_L2_8s_C3CMR
ippiNormRel_L2_8u_C1MR
ippiNormRel_L2_8u_C3CMR
ippiNorm_Inf_16u_C1MR
ippiNorm_Inf_16u_C3CMR
ippiNorm_Inf_32f_C1MR
ippiNorm_Inf_32f_C3CMR
ippiNorm_Inf_8s_C1MR
ippiNorm_Inf_8s_C3CMR
ippiNorm_Inf_8u_C1MR
ippiNorm_Inf_8u_C3CMR
ippiNorm_L1_16u_C1MR
ippiNorm_L1_16u_C3CMR
ippiNorm_L1_32f_C1MR
ippiNorm_L1_32f_C3CMR
ippiNorm_L1_8s_C1MR
ippiNorm_L1_8s_C3CMR
ippiNorm_L1_8u_C1MR
ippiNorm_L1_8u_C3CMR
ippiNorm_L2_16u_C1MR
ippiNorm_L2_16u_C3CMR
ippiNorm_L2_32f_C1MR
ippiNorm_L2_32f_C3CMR
ippiNorm_L2_8s_C1MR
ippiNorm_L2_8s_C3CMR
ippiNorm_L2_8u_C1MR
ippiNorm_L2_8u_C3CMR
ippiOpticalFlowPyrLKFree_16u_C1R
ippiOpticalFlowPyrLKFree_32f_C1R

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f4bce54ded124fc3ec14c13d682cf5c

Code Sign

05:b0:ffCertificate

Key Usages

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

47:95:25:ab:00:00:00:00:01:c8Certificate

Extended Key Usages

Key Usages

61:2c:94:89:00:00:00:00:00:05Certificate

Key Usages

50:31:f9:dd:72:30:d8:ae:36:f8:a3:64:0e:38:ea:5f:06:a3:57:bcSigner

Headers

File Characteristics

Imports

kernel32

ippcoreem64t-6.0

libiomp5md

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 143KB - Virtual size: 142KB

.data Size: 152KB - Virtual size: 162KB

.pdata Size: 45KB - Virtual size: 44KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 14KB

05:b0:ff
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

47:95:25:ab:00:00:00:00:01:c8
Certificate

61:2c:94:89:00:00:00:00:00:05
Certificate

50:31:f9:dd:72:30:d8:ae:36:f8:a3:64:0e:38:ea:5f:06:a3:57:bc
Signer

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 143KB - Virtual size: 142KB

.data
Size: 152KB - Virtual size: 162KB

.pdata
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 14KB