35aab9c463406eb54b11903123fa5c90_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

35aab9c463406eb54b11903123fa5c90_NeikiAnalytics
Size

172KB
MD5

35aab9c463406eb54b11903123fa5c90
SHA1

9b9b2b7700740b7b6b5e2b97da7960cea70ae94f
SHA256

2b0dd7d616d32525815cc5078b70d4d3d30d4fc13c3a5f3bb7510c7f4b078158
SHA512

58ecf89eaf9f49426d23c2904618581daff935d578a10e72b07fd5a4f74c7c4934c3ceb4a93e3e5ff2e91c5b43cc15402c56bacbac6178bb102c06f9a5228634
SSDEEP

1536:SsjOnZPguchDuaFshPN1Of2diSV+ECEuVrE9oqeJ1oCEyV9FWR2m8B:SyOnVtc1ua2hPjS5xVrKoqeJ1oOrBm8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35aab9c463406eb54b11903123fa5c90_NeikiAnalytics

Files

35aab9c463406eb54b11903123fa5c90_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

8e3846f48f0b6dfc8911639d733c2eaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceA
GlobalUnlock
SizeofResource
LoadResource
GetTickCount
GlobalHandle
LocalFree
FormatMessageA
GetLastError
GlobalFree
FreeResource
LockResource
CreateFileA
CloseHandle
GlobalReAlloc
ReadFile
SetFilePointer
WriteFile
GetWindowsDirectoryA
GetVolumeInformationA
_lclose
lstrcpyA
OutputDebugStringA
GetModuleFileNameA
WinExec
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GlobalAlloc
GlobalLock
lstrlenA
lstrcatA
_lopen
lstrcpynA
GetVersionExA
FatalAppExitA
SetEnvironmentVariableA
GetCommandLineA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
GetStringTypeW
GetStringTypeA
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetCurrentProcess
TerminateProcess
ExitProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GetDriveTypeA
SetCurrentDirectoryA
GetFullPathNameA
GetCurrentDirectoryA
CreateDirectoryA
GetLocalTime

user32

IsWindow
DestroyWindow
SendMessageA
CreateDialogParamA
KillTimer
PostMessageA
SetWindowPos
GetWindowRect
SetWindowLongA
GetWindowLongA
SetTimer
SendDlgItemMessageA
ReleaseDC
GetDC
SetDlgItemTextA
SetWindowTextA
wsprintfA
GetDlgItem
LoadIconA
RegisterWindowMessageA
GetActiveWindow
CreateWindowExA
SetForegroundWindow
DestroyIcon
GetWindowTextA
IsWindowVisible
MessageBeep
wvsprintfA
MessageBoxA
DialogBoxParamA
GetSystemMetrics
GetDlgCtrlID
PeekMessageA
TranslateMessage
DispatchMessageA
DeleteMenu
SetRect
UpdateWindow
DestroyMenu
CreatePopupMenu
AppendMenuA
CheckMenuItem
ModifyMenuA
BeginPaint
GetSysColor
InvalidateRect
EndPaint
GetParent
GetWindowWord
SetWindowWord
DefWindowProcA
RegisterClassA
LoadStringA
SetFocus
GetClientRect
MoveWindow
EndDialog
ShowWindow
EnableWindow
WinHelpA
LoadCursorA
SetCursor
GetDlgItemTextA
FindWindowA
GetAsyncKeyState
LoadImageA

gdi32

SetTextColor
SetBkMode
DeleteObject
CreateSolidBrush
CreateFontA
GetDeviceCaps
SetDIBitsToDevice
ExtTextOutA
GetTextExtentPoint32A
SetTextAlign
GetBkColor
SelectObject
SetBkColor

shell32

Shell_NotifyIconA
ShellExecuteA
DragQueryFileA

comctl32

ord17
CreateToolbarEx

comdlg32

GetSaveFileNameA
GetOpenFileNameA

power32

ord705
ord1801
ord1602
ord1503
ord1905
ord1904
ord1907
ord701
ord703
ord303
ord706
ord1803
ord1906
ord1502
ord1901
ord302
ord1501
ord301
ord601
ord702
ord704
ord1902
ord1601
ord1908
ord1903

Exports

Exports

?SetSMFResolution@@YGGPAUSMFStruct@@G@Z
?WriteSMF@@YGKPAUSMFStruct@@HPAUMidiEvent@@K@Z
AbendExit
AccessIniFile
BadUser
CheckDirs
CheckMidiInAvailability
CloseOutPorts
CreateOutPortMenu
CreateSysexDispBytes
Delay
DisplayFatalError
DisplayMidiError
DoAbout
DoProcClientSysCommand
DoProcClientTrayNotify
DoProcCopiedSysexMessage
ExtractFileNameFromPCD
FindPortArraySubscript
FindSynthSubscript
FormatEditorStatusBarString
FormatString
FreeGlobalRAM
FunctionNotAvailable
GetAppOutDevID
GetDllVer
GetMasterControlHandle
GetName
GetPortName
GetRandomSubscript
GetServerBlock
GetStandardMidiFileName
GetTodayAsJJCDate
GetVolSer
GetWin32VolSer
GetWindowsVersionInfo
HidePjcButtons
InitEditor
InitFanfare
InitKick
InitPjsApp
InitTempMffVars
InstallRunType
IsControlKeyDown
IsLiveSettingsAvailable
IsShiftKeyDown
JJCDebug
LoadGenericResource
LoadMFFResource
LockTheDLL
LogPixelsY
MFFPause
MFFPlay
MakeDialogText
MidiConfigure
ModalDlgInit
ModalDlgTerm
NewExt
ODS
ODSSysExBytes
PackKickParameters
PauseSync
PlaceWindow
ProcAbout
ProcAskUseTemplate
ProcDropFiles
ProcGoodMff
ProcHelpButtonBlink
ProcIniItem
ProcLoadMFF
ProcLockClientApp
ProcMsgSales
ProcPanicDlgBox
ProcRegDialog
ProcSMOPDlgBox
ProcSendMulti
ProcSetupThru
ProcTrayIconMessage
ProcessCmdLine
ProcessRewind
ProcessToggleLocal
ProcessTogglePlay
ProcessToggleThru
QueryWrite
ReStartSync
RegDbGetFlag
RegDbSetFlag
SendSysExBytes
SetNewTempoMultiplier
SetNewTransposeAmount
SetRunType
SetThruChannel
SetWindowCaption
SetupAppToolbar
TempMsgBox
TermPjsApp
UnPackKickParameters
UnregisterPJCEditor
UpdateMenuAndToolBar
UtFileOpen
UtFileSaveAs
ValidateRegistryBool
VisitWeb
WriteAppIniInfo
WriteIntlMsgBox
WriteRegInfo
_CloseSMF@4
_GetSMFResolution@4
_OpenSMF@16
_ReadMetaEvent@20
_ReadSMF@16
_RewindSMF@4
_WriteMetaEvent@20
strchksum
strcode
striinc

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e3846f48f0b6dfc8911639d733c2eaf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comctl32

comdlg32

power32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 76KB - Virtual size: 72KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 76KB - Virtual size: 72KB

.reloc
Size: 4KB - Virtual size: 3KB