63661fbe84c378773d76a6e4959c5590_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

63661fbe84c378773d76a6e4959c5590_NeikiAnalytics
Size

9KB
MD5

63661fbe84c378773d76a6e4959c5590
SHA1

9f6f2cafd844af72f6e8d9e80453323b294e2533
SHA256

0eb820648e18e664d99faddd243b5c9e7e2ef208cbd453c5dda4f2ccf42fe8cd
SHA512

26aa95962c9c3d2317a19949c3d491f336c226b00fd1def401846c65fc98f22311d50d4b3a3fe0cf168b03ff14e6c0e2fc7da02024586e215e1ece4fcba11674
SSDEEP

192:Enekfu3hME1hMEuCv/ENbSrbFzCcyssPPP7eDPHnx7I9:EneCMhME1hMEuCv/ENbSF9yDzebHx7Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63661fbe84c378773d76a6e4959c5590_NeikiAnalytics

Files

63661fbe84c378773d76a6e4959c5590_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

d596e45c8625813db43960309782c6a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
Sleep
GetProcAddress
AddAtomA
AddAtomW
AllocConsole
AreFileApisANSI
BackupRead
BackupSeek
CreateWaitableTimerA
CreateWaitableTimerW
DefineDosDeviceW
DeleteAtom
DeviceIoControl
DisableThreadLibraryCalls
DosDateTimeToFileTime
DuplicateHandle
EndUpdateResourceA
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoA
EnumCalendarInfoW
EnumDateFormatsA
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceNamesW
EnumResourceTypesW
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLocalesA
EnumSystemLocalesW

user32

AdjustWindowRect
AdjustWindowRectEx
AnyPopup
AppendMenuA
AppendMenuW
ArrangeIconicWindows
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BringWindowToTop
BroadcastSystemMessageA
BroadcastSystemMessageW
CallMsgFilterW
CallWindowProcA
CascadeWindows
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeMenuA
ChangeMenuW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextA
CharNextW
CharPrevA
CharPrevExA
CharToOemA
CharToOemBuffW
CharToOemW
CharUpperA
CharUpperBuffA
CharUpperW
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ChildWindowFromPointEx
CloseDesktop
CloseWindow
CloseWindowStation
CopyAcceleratorTableW
CopyIcon
CopyImage
CopyRect
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateCaret
CreateCursor
CreateDesktopA
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateIcon
CreateIconFromResource
CreateIconFromResourceEx
CreateMDIWindowA
CreateMDIWindowW
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
CreateWindowStationA
CreateWindowStationW
DdeAbandonTransaction
DdeAccessData
DdeAddData
DdeClientTransaction
DdeConnect
DdeCreateDataHandle
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeDisconnect
DdeDisconnectList
DdeEnableCallback
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeImpersonateClient
DdeInitializeW
DdeKeepStringHandle
DdePostAdvise
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringA
DdeQueryStringW
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DdeUninitialize
DefDlgProcA
DefDlgProcW
DefFrameProcA
DefFrameProcW
DefWindowProcA
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawEdge
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawStateW
DrawTextA

Exports

Exports

?aewtrwtwaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkaslkjdfakdfljsalfdddddddddddddddjal1@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkewrwerwrwjal4@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?wtrwtwetwetwtaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
fafkewrwerwrwjal
fafkewrwerwrwjal1
fafkewrwerwrwjal2
fafkewrwerwrwjal3
rundll23
rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d596e45c8625813db43960309782c6a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 288B

.reloc Size: 1024B - Virtual size: 776B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 288B

.reloc
Size: 1024B - Virtual size: 776B