dea5be016bf2fc496c64782b692c9db0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

dea5be016bf2fc496c64782b692c9db0_NeikiAnalytics
Size

88KB
MD5

dea5be016bf2fc496c64782b692c9db0
SHA1

e5ae430f9a8965fe918e70a2d59fca779c5de96b
SHA256

9a42b9e8142564c90208e16be2f273f85a2bc940b1bc7dc1bdfe19c8b3ef2707
SHA512

eb8439954cb267662c1eb06a95c6589dc0d2404d872d8f84766a4526340c6b26e5d9e39d1c625a76fa253282b8a3df64a07d68b6632319bed7976c94f54e2a98
SSDEEP

768:I+jabRjXe7ZSTywoz99ioXhUtSDIRjnJmwXpeJqCUrjYXp8CASnjwd:naRjdTyHqoXhUYDajJmuYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea5be016bf2fc496c64782b692c9db0_NeikiAnalytics

Files

dea5be016bf2fc496c64782b692c9db0_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

794432042ee9d0cc3fde0c070faf4b02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegEnumKeyA
RegEnumKeyW
RegOpenKeyA
RegOpenKeyW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA

kernel32

DisableThreadLibraryCalls
GetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
MultiByteToWideChar
RaiseException

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_strnicmp
atoi
free
fwrite
getenv
memcmp
memmove
memset
strchr
strcmp
strcpy
strcspn
strlen
wcstol

Exports

Exports

lineAccept
lineAddProvider
lineAddProviderA
lineAddProviderW
lineAddToConference
lineAnswer
lineBlindTransfer
lineBlindTransferA
lineClose
lineCompleteCall
lineCompleteTransfer
lineConfigDialog
lineConfigDialogA
lineConfigDialogEdit
lineConfigDialogEditA
lineConfigDialogW
lineConfigProvider
lineDeallocateCall
lineDevSpecific
lineDevSpecificFeature
lineDial
lineDialA
lineDialW
lineDrop
lineForward
lineForwardA
lineGatherDigits
lineGatherDigitsA
lineGenerateDigits
lineGenerateDigitsA
lineGenerateTone
lineGetAddressCaps
lineGetAddressCapsA
lineGetAddressID
lineGetAddressIDA
lineGetAddressStatus
lineGetAddressStatusA
lineGetAppPriority
lineGetAppPriorityA
lineGetCallInfo
lineGetCallInfoA
lineGetCallStatus
lineGetConfRelatedCalls
lineGetCountry
lineGetCountryA
lineGetCountryW
lineGetDevCaps
lineGetDevCapsA
lineGetDevCapsW
lineGetDevConfig
lineGetDevConfigA
lineGetID
lineGetIDA
lineGetIDW
lineGetIcon
lineGetIconA
lineGetLineDevStatus
lineGetLineDevStatusA
lineGetMessage
lineGetNewCalls
lineGetNumRings
lineGetProviderList
lineGetProviderListA
lineGetProviderListW
lineGetRequest
lineGetRequestA
lineGetStatusMessages
lineGetTranslateCaps
lineGetTranslateCapsA
lineHandoff
lineHandoffA
lineHold
lineInitialize
lineInitializeExA
lineInitializeExW
lineMakeCall
lineMakeCallA
lineMakeCallW
lineMonitorDigits
lineMonitorMedia
lineMonitorTones
lineNegotiateAPIVersion
lineNegotiateExtVersion
lineOpen
lineOpenA
lineOpenW
linePark
lineParkA
linePickup
linePickupA
linePrepareAddToConference
linePrepareAddToConferenceA
lineRedirect
lineRedirectA
lineRegisterRequestRecipient
lineReleaseUserUserInfo
lineRemoveFromConference
lineRemoveProvider
lineSecureCall
lineSendUserUserInfo
lineSetAppPriority
lineSetAppPriorityA
lineSetAppSpecific
lineSetCallParams
lineSetCallPrivilege
lineSetCurrentLocation
lineSetDevConfig
lineSetDevConfigA
lineSetMediaControl
lineSetMediaMode
lineSetNumRings
lineSetStatusMessages
lineSetTerminal
lineSetTollList
lineSetTollListA
lineSetupConference
lineSetupConferenceA
lineSetupTransfer
lineSetupTransferA
lineShutdown
lineSwapHold
lineTranslateAddress
lineTranslateAddressA
lineTranslateAddressW
lineTranslateDialog
lineTranslateDialogA
lineTranslateDialogW
lineUncompleteCall
lineUnhold
lineUnpark
lineUnparkA
phoneClose
phoneConfigDialog
phoneConfigDialogA
phoneDevSpecific
phoneGetButtonInfo
phoneGetButtonInfoA
phoneGetData
phoneGetDevCaps
phoneGetDevCapsA
phoneGetDisplay
phoneGetGain
phoneGetHookSwitch
phoneGetID
phoneGetIDA
phoneGetIcon
phoneGetIconA
phoneGetLamp
phoneGetMessage
phoneGetRing
phoneGetStatus
phoneGetStatusA
phoneGetStatusMessages
phoneGetVolume
phoneInitialize
phoneInitializeExA
phoneInitializeExW
phoneNegotiateAPIVersion
phoneNegotiateExtVersion
phoneOpen
phoneSetButtonInfo
phoneSetButtonInfoA
phoneSetData
phoneSetDisplay
phoneSetGain
phoneSetHookSwitch
phoneSetLamp
phoneSetRing
phoneSetStatusMessages
phoneSetVolume
phoneShutdown
tapiGetLocationInfo
tapiGetLocationInfoA
tapiGetLocationInfoW
tapiRequestDrop
tapiRequestMakeCall
tapiRequestMakeCallA
tapiRequestMediaCall

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 352B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

794432042ee9d0cc3fde0c070faf4b02

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ucrtbase

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.data Size: 4KB - Virtual size: 144B

.rodata Size: 4KB - Virtual size: 856B

.rdata Size: 8KB - Virtual size: 7KB

.pdata Size: 4KB - Virtual size: 1KB

.xdata Size: 4KB - Virtual size: 1KB

.bss Size: - Virtual size: 352B

.edata Size: 12KB - Virtual size: 8KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 32B

.text
Size: 40KB - Virtual size: 38KB

.data
Size: 4KB - Virtual size: 144B

.rodata
Size: 4KB - Virtual size: 856B

.rdata
Size: 8KB - Virtual size: 7KB

.pdata
Size: 4KB - Virtual size: 1KB

.xdata
Size: 4KB - Virtual size: 1KB

.bss
Size: - Virtual size: 352B

.edata
Size: 12KB - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 32B