1471bcbeedf1ec6214e546866a1a2f60_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

1471bcbeedf1ec6214e546866a1a2f60_NeikiAnalytics
Size

561KB
MD5

1471bcbeedf1ec6214e546866a1a2f60
SHA1

f8d0f639d882fb64ecdde65a653c1b65de003c78
SHA256

15bfd94b845b22048f97bc6b33b642ead32917594a9198280c8a6dc47f21dce2
SHA512

0277f43b9276a1fbfe38beb55c4932e3484a2a384efecd25dc0594a94c13d42829c74ece0c4a06833fc60470d6bdeba4c937baa7247aa056fc8997994dc5b07d
SSDEEP

12288:7fCUqL3hSPBWxa75piP6CP36MIb05oOCYG:7fCUqcPBWxa75piP6CP36M005oOCY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1471bcbeedf1ec6214e546866a1a2f60_NeikiAnalytics

Files

1471bcbeedf1ec6214e546866a1a2f60_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

e7aa9fc3f274bda4fb24ab2a63f7f0ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\enstdevs\buildworker\windows64\gpac_public\build\msvc14\obj\x64\Release\xvid_dec\gm_xvid_dec.pdb

Imports

kernel32

GetSystemInfo
Sleep
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW

libgpac

gf_modules_get_option
gf_mem_free
gf_mem_malloc
gf_list_enum
gf_m4v_get_config

vcruntime140

strstr
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

fclose
__stdio_common_vsprintf
fwrite
fopen
__stdio_common_vsscanf

api-ms-win-crt-math-l1-1-0

log
sqrt
log10

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-string-l1-1-0

_stricmp
strncmp

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_initterm_e
_initialize_narrow_environment
_initterm
_configure_narrow_argv

Exports

Exports

LoadInterface
QueryInterfaces
ShutdownInterface

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7aa9fc3f274bda4fb24ab2a63f7f0ed

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

libgpac

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 334KB - Virtual size: 334KB

.rodata Size: 12KB - Virtual size: 12KB

.rotext Size: 116KB - Virtual size: 115KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 37KB - Virtual size: 460KB

.pdata Size: 9KB - Virtual size: 9KB

.gfids Size: 512B - Virtual size: 24B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 252B

.text
Size: 334KB - Virtual size: 334KB

.rodata
Size: 12KB - Virtual size: 12KB

.rotext
Size: 116KB - Virtual size: 115KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 37KB - Virtual size: 460KB

.pdata
Size: 9KB - Virtual size: 9KB

.gfids
Size: 512B - Virtual size: 24B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 252B