ed84cb2003c781fe7c676bd3a4c7b360_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

ed84cb2003c781fe7c676bd3a4c7b360_NeikiAnalytics
Size

242KB
MD5

ed84cb2003c781fe7c676bd3a4c7b360
SHA1

347d5e2a1a38b34f2893f3b519bd4b5bdfbee593
SHA256

1aa394e72361f6d490de50ae3a6599b73b1dcd51ae0774ac917b4154c9e0d67a
SHA512

774d7a91978f4aad57b9e071fefab3a4d52dcd795b9943503379239ea4f855e457234e567fe4687c03e9614587a96ba0110c0bfb19fabe29aa4cff47243e7ba6
SSDEEP

6144:NVQAO87WmOK1t/GyTIigzvWsaJ1XTdX0LL:N2AKQ2WNh0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed84cb2003c781fe7c676bd3a4c7b360_NeikiAnalytics

Files

ed84cb2003c781fe7c676bd3a4c7b360_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

300bee918855b50d104fff97c6aaa6a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\build\source\rjbxfade\rel32\rjbxfade.pdb

Imports

kernel32

GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetEnvironmentVariableA
GetModuleFileNameA
SetErrorMode
LoadLibraryA
GetProcAddress
FreeLibrary
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

CharPrevA
CharNextA
GetSystemMetrics
RegisterClassA
CreateWindowExA
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
FillRect
InvalidateRect
UpdateWindow
DestroyWindow
GetClientRect
LoadImageA
LoadBitmapA
LoadStringA

gdi32

DeleteDC
BitBlt
CombineRgn
FillRgn
CreatePolygonRgn
CreateSolidBrush
GetStockObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr90

_purecall
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
_stricmp
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
strrchr
sprintf
memcpy
??3@YAXPAX@Z
malloc
memset
isspace
_strdup
strtok
free
atol
atof
_time32
strchr
??2@YAPAXI@Z
_strnicmp
_putenv
printf
realloc

Exports

Exports

RMACreateInstance
RMAShutdown
RPCreateInstance
SetDLLAccessPath

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

300bee918855b50d104fff97c6aaa6a9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 8KB - Virtual size: 7KB

.text Size: 135KB - Virtual size: 136KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 135KB - Virtual size: 136KB