dc82ba6c3a02839f0d31d6dc1c7ed200_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

dc82ba6c3a02839f0d31d6dc1c7ed200_NeikiAnalytics
Size

52KB
MD5

dc82ba6c3a02839f0d31d6dc1c7ed200
SHA1

c10cb1199ca9d8c8fa8206f7f6af24a5a138d3a1
SHA256

3bf1f2df6bc614b85196209bcc87523650b5743497667aac50f0c5331ef59aa9
SHA512

fde18a8e98c553354b6291bb90697264a401f045e43867cbe26a959d078bc8a81d06fd36b7016b0d33dd70e177448ddea1631f06633044c99ea6532b8258ae26
SSDEEP

768:7hgmq2eQzlr+UA0NkTiAz1HAgfYUintOF/8Chu+1il5jAy:7dlPkTiAZAgfY3tOZcl5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc82ba6c3a02839f0d31d6dc1c7ed200_NeikiAnalytics

Files

dc82ba6c3a02839f0d31d6dc1c7ed200_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

2278af839592e28b4bf35766ff47128b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetLastError
CloseHandle
DeviceIoControl
OutputDebugStringA
TlsSetValue
SetHandleCount
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
lstrcpyA
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetACP
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

wsprintfA

advapi32

RegCloseKey
RegQueryValueExA

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiDestroyDeviceInfoList

Exports

Exports

GetUSBControlPortName
GetUSBHandle

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2278af839592e28b4bf35766ff47128b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 888B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 888B

.reloc
Size: 4KB - Virtual size: 3KB