f47e48bf2642fbebf07c986990918430_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

f47e48bf2642fbebf07c986990918430_NeikiAnalytics
Size

716KB
MD5

f47e48bf2642fbebf07c986990918430
SHA1

011af116910300ddc7cd417106b01f47821ecd52
SHA256

58d245173aded61c5ca9b0a5b4653fd4e510ec9fde47967c037bc024adf08431
SHA512

98975df2860aa47c9e8d59418af70532389463e006b47874b583d6c115e91ee5587359c0a71ea54e4c23406f72e99b75591677951997205bf61729db478fe083
SSDEEP

12288:yzkT2MuEGBsmaI+w/7IrHWd0g+32pGWPTnHIMjmIml71RaKaFJZdSRhge3:yz1PZ+V89PTTmnRaRJmRhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f47e48bf2642fbebf07c986990918430_NeikiAnalytics

Files

f47e48bf2642fbebf07c986990918430_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

84b31253d294d66f4136158e1b298e7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
CreateEventA
lstrlenA
MultiByteToWideChar
ReleaseMutex
CreateMutexA
FindClose
FindFirstFileA
FindNextFileA
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SetProcessShutdownParameters
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetVersionExA
IsValidCodePage
IsValidLocale
SetEndOfFile
SetConsoleCtrlHandler
FlushFileBuffers
SetStdHandle
CreateFileA
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
ReadFile
SetFilePointer
IsBadWritePtr
VirtualAlloc
GetStringTypeW
GetStringTypeA
WriteFile
VirtualFree
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
OpenProcess
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetLocaleInfoA
ExpandEnvironmentStringsA
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
GetSystemTime
Sleep
GetTickCount
GetVolumeInformationA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
GetCurrentProcess
HeapSize
GetProcAddress

user32

RegisterClassA
DrawTextA
IsWindow
PostMessageA
GetWindowThreadProcessId
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
DestroyWindow
PeekMessageA
CallWindowProcA
KillTimer
SetWindowLongA
SetTimer
EndDialog
DefWindowProcA
BeginPaint
GetClientRect
SendMessageA
EndPaint
MessageBeep
PostQuitMessage
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
FindWindowA
GetClassNameA

advapi32

RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
RegQueryValueExA
RegQueryInfoKeyA

winmm

waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutGetPosition
waveOutRestart
timeKillEvent

shlwapi

PathAppendA

iphlpapi

GetAdaptersInfo

Exports

Exports

CloseDict
CreateTaggerResult
CreateTaggerStruct
FreeTaggerResult
FreeTaggerStruct
OpenDict
VTDTTS_MakeInfo_KOR
VT_AllocSyncInfo_New_KOR
VT_CheckLicense_KOR
VT_CheckUserDictEntry_KOR
VT_CheckUserDict_TargetNorm_KOR
VT_CheckUserDict_TargetPhon_KOR
VT_CheckUserDict_Target_KOR
VT_CopySyncInfo_New_KOR
VT_DestroyWindow_KOR
VT_FreeSyncInfo_New_KOR
VT_GetDefUserDictAbsoluteName_KOR
VT_GetDefUserDictRelativeName_KOR
VT_GetDefVersion_KOR
VT_GetLicenseComment_KOR
VT_GetLicenseInfo_KOR
VT_GetPitchSpeedVolumePause_KOR
VT_GetSpeakerName_KOR
VT_GetTTSInfo_KOR
VT_GetUserDictLimit_KOR
VT_INIT_KOR
VT_InitSyncInfo_New_KOR
VT_LOADTTS_EXT_KOR
VT_LOADTTS_KOR
VT_LOAD_UserDict_EXT_KOR
VT_LOAD_UserDict_KOR
VT_PAUSETTS_KOR
VT_PLAYTTS_KOR
VT_RESTARTTTS_KOR
VT_STOPTTS_KOR
VT_SetEmphasisFactor_KOR
VT_SetParenthesisCharNumber_KOR
VT_SetPitchSpeedVolumePause_KOR
VT_SetSoundCardID_KOR
VT_SetTextTypeForHighlight_KOR
VT_SetUnitSelectHistoryMode_KOR
VT_SetVirtualTagMode_KOR
VT_TextToBufferEX_KOR
VT_TextToBuffer_KOR
VT_TextToFile_KOR
VT_TextToLipSyncLog_KOR
VT_TextToPcmBuffer_ProgressBar_KOR
VT_TextToPreprocessInfoFile_KOR
VT_UNLOADTTS_EXT_KOR
VT_UNLOADTTS_KOR
VT_UNLOAD_UserDict_EXT_KOR
VT_UNLOAD_UserDict_KOR
VT_VerifyTTS_KOR
VT_gHeapStartAddress_KOR
VT_gVersionFirst_KOR
VT_gVersionFourth_KOR
VT_gVersionSecond_KOR
VT_gVersionThird_KOR

Sections

.text
Size: 432KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84b31253d294d66f4136158e1b298e7b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

winmm

shlwapi

iphlpapi

Exports

Exports

Sections

.text Size: 432KB - Virtual size: 429KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 196KB - Virtual size: 1.1MB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 432KB - Virtual size: 429KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 196KB - Virtual size: 1.1MB

.rsrc
Size: 48KB - Virtual size: 47KB