679b52af6457d73031e2bd04228b1810_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

679b52af6457d73031e2bd04228b1810_NeikiAnalytics
Size

161KB
MD5

679b52af6457d73031e2bd04228b1810
SHA1

f87de56a066cfdf52d73e4ce562f1c63ffe6d574
SHA256

d10134f1b1805243c3811b9c2d779ae1531aa41cafff94d513fbd8a9f784c74d
SHA512

4a76d9e1eceff319642b457620cb2f6da1fb118bee060f5a8a9c19baf9e9a2db73965141b453e2622dcc994900b2348c6c72b4a332e919d0f92706e567e63220
SSDEEP

3072:jiujQAzI1aTZunEsfDwf+I+7lU/cc9EvMfUxXr0POGu8bbpOOZ6eW9:GWg1WZunEsfcP+7lU/cc9EvMfUxXr0Pc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679b52af6457d73031e2bd04228b1810_NeikiAnalytics

Files

679b52af6457d73031e2bd04228b1810_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

7033adb54b3fa263780c9cc8c048781d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\SVN\trunk\InoDriverShop\ProductLine\branch\InoDriveWorkShop_3.2.0.0\Servo\TempOut\RemoteCommunication\Release\RemoteCommunication.pdb

Imports

mfc100u

ord7624
ord5261
ord11228
ord11236
ord7391
ord9498
ord11240
ord11209
ord11845
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord5813
ord7548
ord11784
ord908
ord13605
ord2091
ord322
ord2055
ord2053
ord2080
ord1984
ord2045
ord3413
ord13854
ord1953
ord2090
ord2088
ord1945
ord1873
ord1934
ord323
ord1301
ord4744
ord6931
ord6932
ord6922
ord266
ord1943
ord900
ord1312
ord269
ord902
ord5229
ord286
ord2068
ord2064
ord1450
ord4290
ord296
ord265
ord1346
ord1272
ord871
ord1310
ord4086
ord4331
ord2062
ord7176
ord2823
ord1292
ord11353
ord13415
ord2057
ord11330
ord13396
ord890
ord1440
ord280
ord2151
ord1931
ord1968
ord2164
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord4792
ord7393
ord9328
ord8346
ord6140
ord6036
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord13569
ord6869
ord13571
ord13568
ord408
ord3416

msvcr100

_onexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__CppXcptFilter
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxDetectRethrow
__CxxUnregisterExceptionObject
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memmove
memset
_amsg_exit
_initterm_e
_crt_debugger_hook
_except_handler4_common
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_purecall
??3@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
_malloc_crt
free
_encoded_null
_initterm

kernel32

WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
LocalAlloc
LocalFree

oleaut32

VariantClear

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z

mscoree

_CorDllMain

Exports

Exports

CreateInterFace
SafeRelease
SetQueryInterfaceCallback
SupportedInterface

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7033adb54b3fa263780c9cc8c048781d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc100u

msvcr100

kernel32

oleaut32

msvcp100

mscoree

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 2KB - Virtual size: 35KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 2KB - Virtual size: 35KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB