e89c1aa07bc0b8f6d0c3fb2dc3410c20_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

e89c1aa07bc0b8f6d0c3fb2dc3410c20_NeikiAnalytics
Size

60KB
MD5

e89c1aa07bc0b8f6d0c3fb2dc3410c20
SHA1

c4bf2f463fd852b79a5f3d00939c4aed4c957939
SHA256

35fcee22241133999865813fd985b79ccb184bb7b0a3f3d34df9bb34d8002191
SHA512

f75dbf4d8db04c3a242614cabb3ede54fe9c3ce37a07295590962f585b5bd821ca348b71f8c73c1de272f9cf3cee4581df7d8a9cc28f4d480e6918b20c09b1ff
SSDEEP

768:Ta6SVnCWvNTg/L2OeeiRHALRouKDoiB9cN+eUB/s+snoqNsR3H:TQZ1TILulEoU7OUoqNsJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e89c1aa07bc0b8f6d0c3fb2dc3410c20_NeikiAnalytics

Files

e89c1aa07bc0b8f6d0c3fb2dc3410c20_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

e2a1b5beeb088220b53be8e2d87aad52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileStringA
GetProcAddress
LoadLibraryA
GetStdHandle
GetFileType
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
FreeLibrary
SetHandleCount
HeapReAlloc
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

winspool.drv

GetPrinterDriverDirectoryA
ClosePrinter
OpenPrinterA
GetPrinterDriverA

Exports

Exports

CreateConnection
DisposeConnection
GetVenderName
PicPrt_CloseHandle
PicPrt_CreateHandle
PicPrt_GetAlertString
PicPrt_GetData
PicPrt_GetDevData
PicPrt_GetEnumData
PicPrt_GetEnumDataCount
PicPrt_GetImageRect
PicPrt_GetRange
PicPrt_GetString
PicPrt_GetVenderName
PicPrt_SetData
PicPrt_SetDevData
_CreateConnection@8
_DisposeConnection@4
_GetVenderName@8
_PicPrt_CloseHandle@8
_PicPrt_CreateHandle@20
_PicPrt_GetAlertString@24
_PicPrt_GetData@24
_PicPrt_GetDevData@20
_PicPrt_GetEnumData@28
_PicPrt_GetEnumDataCount@16
_PicPrt_GetImageRect@16
_PicPrt_GetRange@24
_PicPrt_GetString@24
_PicPrt_GetVenderName@8
_PicPrt_SetData@16
_PicPrt_SetDevData@12

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2a1b5beeb088220b53be8e2d87aad52

Headers

File Characteristics

Imports

kernel32

winspool.drv

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 808B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 808B

.reloc
Size: 4KB - Virtual size: 3KB