2ef59da0aeb0b448e1875ff7a341d380_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

2ef59da0aeb0b448e1875ff7a341d380_NeikiAnalytics
Size

2.8MB
MD5

2ef59da0aeb0b448e1875ff7a341d380
SHA1

0e78d71ed97803e7a47cda89602d99783a5aacf1
SHA256

0a1821aafc8e6623201ed9e7e93b738000dfed5985515de4b9b98d67b9c47196
SHA512

d232fb647bd3aa47ddae7295feb5b3d5b27366fd159e03b719951a1f6c62989c5489f1b84ddd1a8f4bcb77a2f499b47296d1a401ee499bfdb06307f48c1379f6
SSDEEP

49152:UdPZTnVBRAQWiLE7e6Wx0GYXstjTMQlzGOAD5x9eSHQwz:U9B2QLLE7e6Wx7YXstjTMQlzhAtqSHQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef59da0aeb0b448e1875ff7a341d380_NeikiAnalytics

Files

2ef59da0aeb0b448e1875ff7a341d380_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

3b536cdeeee9dccfb205ba0b9e391b29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strchr
_unlink
_open
_filelength
_commit
_write
_lseek
_read
_close
_sopen
_mktemp
strncpy
__CxxFrameHandler
sprintf
_fpreset
longjmp
_setjmp3
localtime
time
qsort
fclose
rename
_rmdir
remove
fopen
setbuf
_access
_mkdir
_findnext
_findclose
_except_handler3
_findfirst
_utime
_fcvt
_ecvt
tolower
atof
_CIatan2
strtod
_CItan
_CIsin
_CIatan
_CIexp
_CIlog
_CIcos
_CIsqrt
modf
_CIpow
atol
atoi
_ltoa
strtok
_strnicmp
strpbrk
_getdiskfree
strncmp
__mb_cur_max
_isctype
_pctype
strrchr
toupper
memmove
sscanf
free
_errno
malloc
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_getcwd
_fullpath
_chdir
getenv
_chsize
_ftol
_stricmp
_chmod
_stat

kernel32

WinExec
_hread
_hwrite
_lclose
OpenFile
FindFirstFileA
FindClose
FindNextFileA
GlobalHandle
GetDiskFreeSpaceA
GetLastError
GetTempPathA
lstrcpyA
GetModuleHandleA
lstrlenA
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
LoadLibraryA
GetProcAddress
GetVersion
GetCurrentProcessId
GetPrivateProfileIntA
GlobalLock
GlobalSize
GlobalUnlock
GetTickCount
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
ExitThread
CreateSemaphoreA
CreateThread
WaitForSingleObject
ReleaseSemaphore
SizeofResource
CloseHandle
GlobalAlloc
LockResource
LoadResource
FreeResource
FindResourceA
SetLocaleInfoA
GetSystemDefaultLangID
GetProfileStringA
lstrcmpiA
GetUserDefaultLCID
GetLocaleInfoA
GetProfileIntA
lstrcmpA
IsDBCSLeadByte
WritePrivateProfileStringA
MultiByteToWideChar
GetModuleFileNameA
GetSystemInfo
GetPrivateProfileStringA
VirtualQuery
GlobalFree
GetVersionExA
GlobalMemoryStatus

user32

PostMessageA
SetWindowPos
PostThreadMessageA
PostQuitMessage
SetFocus
KillTimer
SetTimer
GetFocus
ExitWindowsEx
LoadStringA
GetSystemMetrics
GetCursorPos
CreateCursor
ShowCursor
MapVirtualKeyA
GetUpdateRect
GetKeyState
GetMessageTime
ScreenToClient
GetMessagePos
EndPaint
wsprintfA
DefWindowProcA
InvalidateRect
GetDC
FillRect
ReleaseDC
GetWindowLongA
BeginPaint
GetTopWindow
DestroyWindow
IsWindow
RegisterClassA
ModifyMenuA
UnregisterClassA
SetWindowLongA
GetParent
GetSystemMenu
CreateWindowExA
GetClassNameA
SetActiveWindow
GetWindowThreadProcessId
GetClassInfoA
GetWindow
GetWindowRect
ShowWindow
IsWindowVisible
UpdateWindow
ValidateRect
GetWindowTextA
SetWindowTextA
MoveWindow
GetMenu
ClientToScreen
GetClientRect
SetRect
SetParent
SetCapture
ReleaseCapture
SetWindowRgn
InvertRect
GetSysColor
GetForegroundWindow
SendMessageA
SetSysColors
CharUpperA
IntersectRect
WindowFromDC
MapWindowPoints
SystemParametersInfoA
GetCapture
GetAsyncKeyState
PtInRect
GetWindowDC
OffsetRect
PeekMessageA
ChangeDisplaySettingsA
EmptyClipboard
GetKeyboardState
wvsprintfA
CharLowerBuffA
GetActiveWindow
RegisterClipboardFormatA
SetScrollRange
ShowScrollBar
GetMenuItemID
SetScrollPos
CharUpperBuffA
DestroyCursor
SetCursor
LoadCursorA
MessageBoxA
MessageBeep
OpenClipboard
CloseClipboard
GetClipboardData
GetClipboardFormatNameA
EnumClipboardFormats
SetClipboardData
AppendMenuA
CreatePopupMenu
CheckMenuItem
CreateMenu
SetMenu
DestroyMenu
DeleteMenu
EnableMenuItem
GetMenuStringA
GetSubMenu
GetMenuItemCount
GetMenuState

gdi32

CreateRectRgn
SetStretchBltMode
StartPage
DeleteObject
StretchBlt
SelectPalette
GetCurrentObject
CreateSolidBrush
GetSystemPaletteEntries
GetStockObject
CreatePalette
GetPaletteEntries
DeleteDC
SetPaletteEntries
GetViewportExtEx
SaveDC
SetDIBColorTable
GetClipBox
IntersectClipRect
RestoreDC
SelectObject
StretchDIBits
BitBlt
SetBkMode
SetMapMode
SelectClipRgn
StartDocA
CreateDIBSection
CreateCompatibleDC
GetObjectA
GetDeviceCaps
RealizePalette
UnrealizeObject
SetSystemPaletteUse
GetSystemPaletteUse
AnimatePalette
CreateDIBitmap
CreatePatternBrush
SetTextColor
SetBkColor
CreateBitmap
ExtTextOutA
GetTextExtentPoint32A
Rectangle
LineTo
MoveToEx
CreateFontA
CreatePen
SetDIBitsToDevice
CombineRgn
GdiFlush
GetTextMetricsA
CreateICA
EnumFontFamiliesA
CreateFontIndirectA
GetTextFaceA
CreateDCA
RoundRect
Ellipse
CreateDIBPatternBrushPt
GetClipRgn
SetTextAlign
EndDoc
EndPage

comdlg32

CommDlgExtendedError
GetOpenFileNameA

winmm

timeGetDevCaps
DefDriverProc
timeBeginPeriod
mciSendCommandA
timeEndPeriod
timeGetTime

ole32

CoCreateInstance
CoInitialize
CoUninitialize

imm32

ImmGetCompositionStringA
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmNotifyIME

Exports

Exports

imIMEGetActiveCompositionWindow
imIMEGetCandidateWindowActive
imIMEGetCompositionActive
imIMEGetCompositionJustFixed
imIMEGetLastSelectionLeft
imIMEServiceAvailable
imIMEServiceFixActiveInput
imIMEServicePushActivatedContext
imIMESetActiveCompositionWindow
imIMESetCandidateWindowActive
imIMESetCandidateWindowPos
imIMESetCompositionActive
imIMESetCompositionJustFixed
imIMESetLastSelectionLeft
imIMEUnpackSelection
imIMEUnpackText
imIMEUseInputWindow

Sections

.text
Size: 452KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b536cdeeee9dccfb205ba0b9e391b29

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

winmm

ole32

imm32

Exports

Exports

Sections

.text Size: 452KB - Virtual size: 449KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 12KB - Virtual size: 75KB

.rsrc Size: 32KB - Virtual size: 28KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 452KB - Virtual size: 449KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 12KB - Virtual size: 75KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 20KB - Virtual size: 19KB