2566001d75d389370663cb5f0b411c30_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

2566001d75d389370663cb5f0b411c30_NeikiAnalytics
Size

232KB
MD5

2566001d75d389370663cb5f0b411c30
SHA1

fcaf0f022a30fb5b94e814366dbe43874dbaa5d4
SHA256

445b4f0f9e5444f78cf2554a904cd773865b4c349eddcab50edcd8a9ea7be922
SHA512

638f80229a5adb3551a33b81591a63afe787d874376a7c023c7f9068059372819d1f9d367c3c127d9ac190352d317bedbe39ecc02f6be1a84905126d20162ef8
SSDEEP

3072:4obKg8ETvqZHNeT41SWoyad5ja2ueRld4xmSD4YNFiLd4RVSx:4on8EDUH42xmSEYNJRVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2566001d75d389370663cb5f0b411c30_NeikiAnalytics

Files

2566001d75d389370663cb5f0b411c30_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

3fb34d081f1429b83b4c5917552b40c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
GetCapture
WinHelpA
EnableWindow
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetClassInfoA
RegisterClassA
MessageBoxA
SetWindowPos
IsIconic
SystemParametersInfoA
RegisterWindowMessageA

comctl32

ord17

kernel32

RtlUnwind
ExitProcess
TerminateProcess
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetModuleHandleA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
SetStdHandle
IsBadReadPtr
IsBadCodePtr
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
CloseHandle
GetFileType
GetProcAddress
InterlockedDecrement
GetLastError
SetLastError
GetVersion
lstrcpynA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
GetStartupInfoA
InterlockedIncrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
LocalFree

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

Sr2Xml

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fb34d081f1429b83b4c5917552b40c2

Headers

File Characteristics

Imports

user32

comctl32

kernel32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 116KB - Virtual size: 129KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 116KB - Virtual size: 129KB

.reloc
Size: 20KB - Virtual size: 17KB