5e540d52b1c1caf58ff9687eb0547b10_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

5e540d52b1c1caf58ff9687eb0547b10_NeikiAnalytics
Size

2.9MB
MD5

5e540d52b1c1caf58ff9687eb0547b10
SHA1

9dfd1f89f6f09c4697d79e6cecdd62f2b3e51686
SHA256

840862b13d361a9c43ffc6f9e16ef60cc3d21ba784f7f4aa7bcba3a7d0db9e65
SHA512

ab13b36298867ff8b3c14eea9855af70319f6f77d77749cf15de0f3fb3395651f8fa45910e2c39e2d9b88284f9b0a64984353edfbf08e44c5aed454b66fb03d3
SSDEEP

49152:FJDRli+qDq1S/rPvLel+m+N0FTI10DC/pWM5tlCMi+Eq230UzLqFfFO+y/PN7:rz1SPvLi+m7ZI10DC/pWM5tDEq233LqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e540d52b1c1caf58ff9687eb0547b10_NeikiAnalytics

Files

5e540d52b1c1caf58ff9687eb0547b10_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

95310299bda3a82e5a635b2ba8362f80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\lingkai\Desktop\manager\bin\StorOSManager.pdb

Imports

smiapiclient

bnclient_get_global_info
bnclient_get_lun
bnclient_download_complete_maintainlog_v2
bnclient_recvFile
bnclient_get_enviro_criticalval
bnclient_get_enviro_headinfo
bnclient_get_enviro_chassisinfo
bnclient_get_enviro_fantemp
bnclient_san_quick_config
bnclient_get_setting_ret
bnclient_get_nascapacity_ex
bnclient_get_average_io
bnclient_get_disk_status_byflag_ex
bnclient_get_iscsi_lun_num
bnclient_get_fastsetting_disk_info
bnclient_check_server_mode
bnclient_get_setting_version
bnclient_EnableFirstCall
bnclient_setNvrAlarmCallBack
bnclient_EnableKeepSession
bnclient_keepSession
bnclient_get_product_name
bnclient_auto_download_maintainlog
bnclient_setAlarmInterval
bnclient_get_disk_temp_criticalval
bnclient_get_harddisk
bnclient_get_headexpand
bnclient_get_cvr_setting_ret
bnclient_cvr_quick_config
bnclient_get_system_performance
bnclient_cvr_start_service
bnclient_cvr_stop_service
bnclient_download_syslog
bnclient_download_CpuNetMem_Usedlog
bnclient_cvr_get_state
bnclient_get_sys_id
bnclient_getServerVersion
bnclient_system_control
bnclient_get_passwd_md5
long2bntime
bntime2str
bnclient_upload_bios
bnclient_get_curbios
bnclient_getLastError
bnclient_halogin
bnclient_alllogin
bnclient_setServerPort
bnclient_check_cluster_mode
bnclient_get_other_infoEx
bnclient_logout
bnclient_get_other_info
bnclient_get_system_set_status
bnclient_setAlarmCallBack
bnclient_Is_cluster

apiclient86

bnclient86_cvr_stop_service
bnclient86_cvr_start_service
bnclient86_download_complete_maintainlog_v2
bnclient86_setAlarmCallBack
bnclient86_EnableKeepSession
bnclient86_getLastError
bnclient86_keepSession
bntime2str86
bnclient86_auto_download_maintainlog
bnclient86_setAlarmInterval
bnclient86_setServerPort
bnclient86_login
bnclient86_logout
bnclient86_get_curbios
bnclient86_upload_bios
bnclient86_get_passwd_md5
bnclient86_system_control
bnclient86_getServerVersion
bnclient86_get_sys_id
bnclient86_cvr_get_state

kernel32

GetFileAttributesW
GetFileSizeEx
GetFileTime
GetCurrentDirectoryW
GetWindowsDirectoryW
GetNumberFormatW
GetTempFileNameW
GetTempPathW
GetTickCount
GetProfileIntW
SearchPathW
GetUserDefaultLCID
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
ExitProcess
ExitThread
GetCPInfo
GetSystemInfo
VirtualQuery
GetTimeFormatA
GetDateFormatA
GetConsoleCP
GetConsoleMode
RtlUnwind
RaiseException
HeapReAlloc
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
lstrcmpiW
VirtualProtect
GetThreadLocale
InterlockedIncrement
lstrcmpA
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
SetThreadPriority
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
FreeLibrary
CompareStringW
lstrcmpW
GlobalSize
FormatMessageW
LocalFree
GetCurrentProcessId
CreateProcessW
GetModuleFileNameW
CopyFileW
WriteFile
CreateFileW
GetCurrentThreadId
FormatMessageA
ResetEvent
SetEvent
WaitForSingleObject
FreeResource
GlobalAlloc
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
CreateEventW
GetExitCodeThread
GetPrivateProfileStringW
VirtualAlloc
InitializeCriticalSection
SuspendThread
CloseHandle
CreateThread
lstrlenA
DeleteFileW
ResumeThread
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
DeactivateActCtx
SetLastError
Beep
InterlockedCompareExchange
WideCharToMultiByte
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
MultiByteToWideChar
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalGetAtomNameW
GetFileAttributesExW
SetErrorMode
FindResourceExW
lstrcpyW
FileTimeToSystemTime
GetFullPathNameW
FileTimeToLocalFileTime

user32

UnpackDDElParam
IsZoomed
SetParent
DestroyAcceleratorTable
SetClassLongW
GetSystemMenu
DrawStateW
DrawEdge
DrawFrameControl
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SetCursorPos
LockWindowUpdate
RegisterClipboardFormatW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
SetMenuDefaultItem
IsClipboardFormatAvailable
GetUpdateRect
CopyIcon
CharUpperBuffW
GetDoubleClickTime
SubtractRect
DestroyCursor
SetScrollRange
GetScrollRange
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
GetMenu
SetWindowPos
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
GetDlgItemInt
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
MonitorFromWindow
GetWindowThreadProcessId
DrawFocusRect
MessageBoxW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetForegroundWindow
UnregisterHotKey
ReuseDDElParam
GetWindowRgn
DrawIcon
IsIconic
RemoveMenu
CallNextHookEx
GetClassNameW
SetWindowLongW
CallWindowProcW
SetWindowsHookExW
GetMenuState
InsertMenuW
CreatePopupMenu
AppendMenuW
GetMenuItemID
GetMenuItemCount
LoadMenuW
CreateMenu
ModifyMenuW
GetMenuItemInfoW
GetFocus
GetKeyState
ShowScrollBar
GetSysColor
DrawTextW
CloseWindow
GetSystemMetrics
SetRectEmpty
PostQuitMessage
LoadIconW
FrameRect
SetTimer
KillTimer
ReleaseDC
GetDC
EqualRect
IsWindowVisible
PostMessageW
EnableMenuItem
GetSubMenu
ClientToScreen
GetCursorPos
ScreenToClient
GetDlgCtrlID
LoadBitmapW
SetRect
SendMessageW
GetWindowLongW
GetWindowRect
GetParent
InvalidateRect
EnableWindow
FillRect
SetWindowRgn
PtInRect
OffsetRect
GetClientRect
CopyRect
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
DrawIconEx
LoadImageW
CopyImage
InvertRect
GetMenuDefaultItem
RedrawWindow
DestroyIcon
MessageBeep
GetNextDlgGroupItem
DeleteMenu
WaitMessage
ReleaseCapture
SetCapture
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
SetLayeredWindowAttributes
EnumDisplayMonitors
UnregisterClassW
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
ShowOwnedPopups
SetCursor
SetWindowContextHelpId
CharUpperW
GetMonitorInfoW
MapWindowPoints
ScrollWindow
MapDialogRect
GetAsyncKeyState
CharNextW
SystemParametersInfoW
DestroyMenu
WindowFromPoint
MapVirtualKeyW
GetKeyNameTextW
IntersectRect
InflateRect
GetMessageW
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetIconInfo
NotifyWinEvent
EnableScrollBar
RegisterHotKey
HideCaret
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetLastActivePopup
PeekMessageW
TrackPopupMenu
GetMenuStringW
SetMenu
CheckDlgButton

gdi32

CreateRoundRectRgn
GetObjectW
CreateCompatibleDC
BitBlt
SelectObject
CreateDIBSection
CreateRectRgn
CombineRgn
GetTextFaceW
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
DeleteDC
CreateSolidBrush
StretchBlt
CreateFontW
GetStockObject
SetDCBrushColor
CreatePen
Rectangle
MoveToEx
LineTo
CreateCompatibleBitmap
Pie
BeginPath
EndPath
PathToRegion
FillRgn
PtInRegion
GetTextMetricsW
GetTextExtentPoint32W
GetDIBColorTable
SetDIBColorTable
SetPixel
SetBkMode
SetTextColor
CreateFontIndirectW
GetDeviceCaps
OffsetRgn
SaveDC
RestoreDC
SetBkColor
SetPolyFillMode
SetROP2
SetGraphicsMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
SelectPalette
GetObjectType
CreateHatchBrush
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
SetRectRgn
GetMapMode
PatBlt
DPtoLP
GetBkColor
GetTextColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
DeleteObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegSetValueExW

shell32

Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHAppBarMessage

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathStripToRootW
PathRemoveFileSpecW
PathFindExtensionW
PathIsUNCW
PathFileExistsW
PathFindFileNameW

ole32

OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoTaskMemFree
CreateILockBytesOnHGlobal
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
OleLockRunning

oleaut32

SysAllocStringLen
OleLoadPicture
SysAllocString
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VarBstrFromDate
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
VariantCopy

oledlg

OleUIBusyW

gdiplus

GdipCreateFromHDC
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream

ws2_32

shutdown
htonl
htons
bind
listen
select
accept
setsockopt
inet_ntoa
ioctlsocket
connect
WSAStartup
recvfrom
ntohl
inet_addr
WSAGetLastError
socket
sendto
__WSAFDIsSet
gethostbyname
send
getsockopt
closesocket
recv

sendemail

?SendData@ZSmtp@@QAE_NPBD000000_N@Z
?Validate@ZSmtp@@QAE_NPBD0@Z
?Connect@ZSmtp@@QAE_NPBDH@Z
??1ZSmtp@@UAE@XZ
??0ZSmtp@@QAE@XZ
?DisConnect@ZSmtp@@QAEXXZ

gsmmultiport

ord3
ord4
ord11

sadp

SADP_ModifyDeviceNetParam
SADP_Start_V30
SADP_SendInquiry
SADP_Stop

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95310299bda3a82e5a635b2ba8362f80

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

smiapiclient

apiclient86

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

sendemail

gsmmultiport

sadp

oleacc

imm32

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 444KB - Virtual size: 444KB

.data Size: 31KB - Virtual size: 74KB

.rsrc Size: 217KB - Virtual size: 217KB

.reloc Size: 229KB - Virtual size: 229KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 444KB - Virtual size: 444KB

.data
Size: 31KB - Virtual size: 74KB

.rsrc
Size: 217KB - Virtual size: 217KB

.reloc
Size: 229KB - Virtual size: 229KB