81374b27b92d1983fe7c1767f0478490_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

81374b27b92d1983fe7c1767f0478490_NeikiAnalytics
Size

1.3MB
MD5

81374b27b92d1983fe7c1767f0478490
SHA1

ad81c387fc6b498f80082d044a209f3d4ac6f61d
SHA256

83b66decf4159dfea6abde2b18f93a3447aac88ef5c0e25c4cb4e078d5505dca
SHA512

2c70ac77cb8240016a08a5f0ed82008307c2710b9e79936e31ecebb5c31f3f03f538988d796275fb5d57e04038dcbe0c5cb3ded356598bb6cff95eda7c71961e
SSDEEP

24576:bQuazEFIhX3Z8EY8VyOFP6WH9AkhzWeJaJSOjblM8hjvZWipWAZj2MflLreuzpht:ETAuL8I3rcmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81374b27b92d1983fe7c1767f0478490_NeikiAnalytics

Files

81374b27b92d1983fe7c1767f0478490_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

cd327beea064d99f12f27d81999fafc3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

iphlpapi

GetAdaptersAddresses
GetNetworkParams

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetCurrentThread
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetThreadContext
GetVersion
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
MultiByteToWideChar
SetThreadContext
Sleep
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock
WideCharToMultiByte

msvcrt

_access
_strdup
__dllonexit
__mb_cur_max
_assert
_errno
_flsbuf
_get_osfhandle
_iob
_snprintf
_stat64
_time64
_waccess
_wfopen
abort
atof
atoi
calloc
clock
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
isalnum
isprint
isspace
localeconv
malloc
memcmp
memcpy
memmove
memset
qsort
rand
realloc
setlocale
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
tolower
toupper
vfprintf
wcslen

user32

wsprintfA

ws2_32

inet_ntoa

Exports

Exports

assert_armored
clean_obj
encode_capsule_key_file
encrypt_code_object
encrypt_files
encrypt_project_files
exec_file
generate_license_key
generate_project_license_files
get_error_msg
get_expired_days
get_hd_info
get_registration_code
import_module
init_module
init_runtime
set_option
show_hd_info
version_info

Sections

.text
Size: 764KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 555B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd327beea064d99f12f27d81999fafc3

Headers

File Characteristics

Imports

advapi32

iphlpapi

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 764KB - Virtual size: 764KB

.data Size: 383KB - Virtual size: 383KB

.rdata Size: 114KB - Virtual size: 114KB

/4 Size: 42KB - Virtual size: 42KB

.bss Size: - Virtual size: 40KB

.edata Size: 1024B - Virtual size: 555B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 764KB - Virtual size: 764KB

.data
Size: 383KB - Virtual size: 383KB

.rdata
Size: 114KB - Virtual size: 114KB

/4
Size: 42KB - Virtual size: 42KB

.bss
Size: - Virtual size: 40KB

.edata
Size: 1024B - Virtual size: 555B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 20KB - Virtual size: 19KB