78f9ecda46a44d42e4338c89adec0390_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

78f9ecda46a44d42e4338c89adec0390_NeikiAnalytics
Size

2.1MB
MD5

78f9ecda46a44d42e4338c89adec0390
SHA1

ea576ca0e71b149108814d60abab369992f556ea
SHA256

5522ee3c66781b52dcecd42df57dafe015ac6a232a88eab08094b2c6c7d5af0b
SHA512

e2c436f03ab4aa99ae6490e7731f92537d85127f9198fab855bf25c0fe499158be8727b174bfaf442339d374974b46299b40065e55f0ad0fb85df6600e0dd918
SSDEEP

49152:Vc99rHst0yuIgV1plIxwHeEJ1qpDfpLr2mrbhWdqTA:GrHHIuIAVsLr3QqA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f9ecda46a44d42e4338c89adec0390_NeikiAnalytics

Files

78f9ecda46a44d42e4338c89adec0390_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

d1cb338c9d2a7a217b3d58993774729c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

icuuc46

??2UMemory@icu_46@@SAPAXI@Z
??3UMemory@icu_46@@SAXPAX@Z

iculx46

??1FontRuns@icu_46@@UAE@XZ
?getDynamicClassID@ParagraphLayout@icu_46@@UBEPAXXZ
?getParagraphLevel@ParagraphLayout@icu_46@@QAEEXZ
?getLeading@ParagraphLayout@icu_46@@UBEHXZ
?getDescent@ParagraphLayout@icu_46@@UBEHXZ
?getAscent@ParagraphLayout@icu_46@@UBEHXZ
?getVisualRun@Line@ParagraphLayout@icu_46@@QBEPBVVisualRun@23@H@Z
?nextLine@ParagraphLayout@icu_46@@QAEPAVLine@12@M@Z
??0ParagraphLayout@icu_46@@QAE@QB_WHPBVFontRuns@1@PBVValueRuns@1@2PBVLocaleRuns@1@ECAAW4LEErrorCode@@@Z
?add@FontRuns@icu_46@@QAEHPBVLEFontInstance@2@H@Z
??0FontRuns@icu_46@@QAE@H@Z
??1ParagraphLayout@icu_46@@UAE@XZ

fmodex

?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?stop@Channel@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setVolume@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVSound@2@_NPAPAVChannel@2@@Z
?isPlaying@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
FMOD_System_Create

comctl32

ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ord17

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

kernel32

GetStartupInfoW
CreateProcessW
WaitForSingleObject
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
WriteFile
LocalAlloc
CreateDirectoryW
GetLastError
LocalFree
FindFirstFileW
FindNextFileW
FindClose
GetFileSize
GetLocaleInfoW
GetDateFormatW
GetTimeFormatW
GetTimeZoneInformation
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileType
GetFileInformationByHandle
GetSystemTime
GetLocalTime
SetFilePointer
ReadFile
FileTimeToDosDateTime
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DosDateTimeToFileTime
SetFileTime
IsWow64Process
FormatMessageW
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
QueryPerformanceFrequency
LoadLibraryExW
RaiseException
RtlUnwind
AreFileApisANSI
MoveFileExW
CopyFileW
CreateDirectoryExW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
RemoveDirectoryW
GetFileTime
GetFileAttributesExW
DeleteFileW
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynW
lstrlenW
_lread
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
MulDiv
Sleep
Beep
CloseHandle
CreateThread
GetCurrentProcess
TerminateProcess
FreeLibrary
GetModuleHandleW
LoadLibraryW
GetACP
GetModuleFileNameW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapAlloc
HeapFree
GetConsoleMode
ReadConsoleW
GetConsoleCP
FlushFileBuffers
HeapReAlloc
FindFirstFileExA
FindNextFileA
IsValidCodePage
ResetEvent
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
WaitForSingleObjectEx
SetStdHandle
WriteConsoleW
HeapSize
lstrcpyW
GetSystemDirectoryW
SetEvent
FormatMessageA

user32

CreateIconIndirect
GetIconInfo
SetRect
SetScrollInfo
GetScrollInfo
GetScrollPos
TrackPopupMenuEx
InsertMenuW
GetMenuState
GetSubMenu
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
ModifyMenuW
SetScrollPos
GetComboBoxInfo
GetWindowTextLengthW
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetNextDlgGroupItem
GetNextDlgTabItem
GetClassNameW
ActivateKeyboardLayout
SetWindowTextW
IsWindowVisible
EndPaint
BeginPaint
GetCursor
SetClassLongW
GetClassLongW
MapWindowPoints
MoveWindow
DestroyWindow
DefWindowProcW
DrawIconEx
LoadImageW
ShowScrollBar
IntersectRect
UnionRect
RedrawWindow
SetWindowRgn
EqualRect
OffsetRect
ReleaseCapture
SetCapture
IsWindowEnabled
GetKeyboardLayout
DialogBoxParamW
CreateWindowExW
RegisterClassExW
GetMessageW
SendInput
VkKeyScanW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
GetWindowTextW
GetParent
TranslateMessage
DispatchMessageW
PostMessageW
MessageBoxW
GetDlgItem
EnableWindow
GetClientRect
InvalidateRect
SendMessageW
GetFocus
GetMessagePos
GetKeyState
SystemParametersInfoW
GetWindowLongW
GetCapture
DestroyMenu
CreateMenu
SetMenuDefaultItem
GetWindowRect
GetSysColor
SetForegroundWindow
GetDC
ReleaseDC
CharNextW
SetWindowPos
FillRect
GetSysColorBrush
GetCursorPos
CreatePopupMenu
InsertMenuItemW
TrackPopupMenu
LoadIconW
ClientToScreen
ScreenToClient
PtInRect
DestroyIcon
InflateRect
GetAsyncKeyState
CallWindowProcW
SetWindowLongW
LoadCursorW
SetFocus
SetCursor
KillTimer
SetTimer
PostQuitMessage
ShowWindow
FindWindowW
UnloadKeyboardLayout
GetKeyboardLayoutNameW
LoadKeyboardLayoutW
EndDialog
GetKeyboardLayoutList

gdi32

CreateSolidBrush
CreateCompatibleBitmap
BitBlt
ExtCreateRegion
SetLayout
RestoreDC
CreateBitmap
GetPixel
StretchBlt
SetStretchBltMode
SaveDC
CreateDIBSection
DeleteDC
CombineRgn
GetTextExtentPoint32W
CreateCompatibleDC
SetPixel
AddFontResourceExW
RemoveFontResourceExW
TextOutW
CreateRectRgnIndirect
OffsetRgn
CreateRectRgn
SetBkColor
SetTextColor
GetDeviceCaps
GetObjectA
GetGlyphOutlineW
GetTextMetricsW
GetKerningPairsW
SelectObject
SetViewportOrgEx
SetWindowOrgEx
SetGraphicsMode
ModifyWorldTransform
GetOutlineTextMetricsW
GetFontData
CreateFontIndirectW
GetObjectW
SelectClipRgn
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseColorW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AccessCheck
MapGenericMask
DuplicateToken
OpenProcessToken
GetFileSecurityW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
GetUserNameW

shell32

ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
Shell_NotifyIconW
SHGetSpecialFolderPathW

gdiplus

GdipScaleWorldTransform
GdipSetPenDashStyle
GdipCreateLineBrush
GdipSetClipRect
ord1
GdipDrawPath
GdipDrawEllipse
GdipDrawLineI
GdipSetPenStartCap
GdipDrawRectangleI
GdipResetWorldTransform
GdipGetImageHeight
GdipGetImageWidth
GdipImageRotateFlip
GdipDrawImagePointsRectI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDrawImageI
GdipSetLinePresetBlend
GdipFillRectangleI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFileICM
GdipDrawImagePointRectI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromGraphics
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipMeasureString
GdipSetSmoothingMode
GdipGetSolidFillColor
GdipSetWorldTransform
GdipScaleMatrix
GdipRotateMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipGraphicsClear
GdipCreateLineBrushFromRect
GdipFillRectangle
GdipDrawLines
GdipFillPolygon
GdipDrawLine
GdipTranslateWorldTransform
GdipCreatePen1
GdipCreateSolidFill
GdipSetTextRenderingHint
GdipDeletePen
GdipCloneBrush
GdipDeleteBrush
GdipFillPath
GdipDeleteFont
GdipDeletePrivateFontCollection
GdipMeasureDriverString
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipDrawDriverString
GdipGetFontStyle
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipGetFamilyName
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipPrivateAddFontFile
GdipNewPrivateFontCollection
GdipFree
GdipAlloc
GdipDeleteFontFamily
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipClosePathFigure
GdipAddPathBezier
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdipSetPathFillMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipDrawRectangle
GdipFillEllipse

icule46

??0LEFontInstance@icu_46@@QAE@XZ
?getLineHeight@LEFontInstance@icu_46@@UBEHXZ
?transformFunits@LEFontInstance@icu_46@@UBEXMMAAULEPoint@@@Z
?pixelsToUnits@LEFontInstance@icu_46@@UBEXAAULEPoint@@0@Z
?yPixelsToUnits@LEFontInstance@icu_46@@UBEMM@Z
?xPixelsToUnits@LEFontInstance@icu_46@@UBEMM@Z
?unitsToPoints@LEFontInstance@icu_46@@UBEXAAULEPoint@@0@Z
?yUnitsToPoints@LEFontInstance@icu_46@@UBEMM@Z
?xUnitsToPoints@LEFontInstance@icu_46@@UBEMM@Z
?mapCharToGlyph@LEFontInstance@icu_46@@UBEIHPBVLECharMapper@2@C@Z
?mapCharToGlyph@LEFontInstance@icu_46@@UBEIHPBVLECharMapper@2@@Z
?mapCharsToGlyphs@LEFontInstance@icu_46@@UBEXQB_WHHCPBVLECharMapper@2@CAAVLEGlyphStorage@2@@Z
?canDisplay@LEFontInstance@icu_46@@UBECH@Z
?getSubFont@LEFontInstance@icu_46@@UBEPBV12@QB_WPAHHHAAW4LEErrorCode@@@Z
?getDynamicClassID@LEFontInstance@icu_46@@UBEPAXXZ
??1LEFontInstance@icu_46@@UAE@XZ

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1cb338c9d2a7a217b3d58993774729c

Headers

DLL Characteristics

File Characteristics

Imports

icuuc46

iculx46

fmodex

comctl32

rpcrt4

kernel32

user32

gdi32

comdlg32

advapi32

shell32

gdiplus

icule46

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 320KB - Virtual size: 320KB

.data Size: 23KB - Virtual size: 31KB

.rsrc Size: 162KB - Virtual size: 161KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 320KB - Virtual size: 320KB

.data
Size: 23KB - Virtual size: 31KB

.rsrc
Size: 162KB - Virtual size: 161KB