3e8c1addf1ed97517c8005942c8b25d0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

3e8c1addf1ed97517c8005942c8b25d0_NeikiAnalytics
Size

62KB
MD5

3e8c1addf1ed97517c8005942c8b25d0
SHA1

6c4a0a679267808c1f0d73d225c3c353a455ee38
SHA256

2c1886a2d3c00db07cb8eb7fbd0b021e4612b1e8fc333d31d5665822fd6eaa09
SHA512

060659a3ed96da6e8e83532c344caa43f579fd71a310efcfe862f6d1fadb5e8d8e4ed4068ec5ac6dd5c854f314062df13eb7fb6aa852aed306247350232ab707
SSDEEP

1536:5ptx9qp3K70vutwpY8Xk/BgAd4J9yo6Ctq:L9qp3putwpY8XQBgoo6Gq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e8c1addf1ed97517c8005942c8b25d0_NeikiAnalytics

Files

3e8c1addf1ed97517c8005942c8b25d0_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

cecdb7032f311405f133a19d378bc724

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

??3@YAXPAX@Z
??2@YAPAXI@Z
_vsnwprintf
malloc
_cexit
__FrameUnwindFilter
memset
_crt_debugger_hook
_encode_pointer
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_strnicmp

kernel32

Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
InterlockedExchange
GetSystemTimeAsFileTime
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
lstrcpyA
SystemTimeToFileTime
GetSystemTime
FreeLibrary
GetCurrentProcessId
GetProcAddress
GetVersionExW
HeapFree
lstrlenW
GetSystemDirectoryW
WideCharToMultiByte
DeviceIoControl
CloseHandle
CreateFileA
CreateFileW
GetPrivateProfileStringW
HeapReAlloc
TerminateProcess
GetProcessHeap

crypt32

CertEnumCertificatesInStore
CertNameToStrW
CertGetCertificateContextProperty
CertCloseStore
CertCreateCertificateContext
CertFreeCertificateContext
CertOpenStore

winscard

SCardConnectW
SCardDisconnect
SCardFreeMemory
SCardReleaseContext
SCardEstablishContext
SCardListReadersW

wininet

DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW
FindCloseUrlCache

shlwapi

StrStrA
StrStrIW
StrCatW

rasapi32

RasHangUpW
RasEnumConnectionsW

ra_log

?WriteRunException@@YGXPB_W00@Z

user32

wsprintfW
PostThreadMessageW
IsWindow
PostMessageW

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
CryptAcquireContextA
CryptGetProvParam
CryptReleaseContext
CryptGetUserKey
CryptGetKeyParam
CryptDestroyKey
RegQueryValueExW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

msvcm90

?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cecdb7032f311405f133a19d378bc724

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

crypt32

winscard

wininet

shlwapi

rasapi32

ra_log

user32

advapi32

shell32

ole32

msvcm90

setupapi

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 836B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 836B