a78fac7c1b14f37536b0edb1d6fb4fb0_NeikiAnalytics

General

Target

a78fac7c1b14f37536b0edb1d6fb4fb0_NeikiAnalytics
Size

92KB
MD5

a78fac7c1b14f37536b0edb1d6fb4fb0
SHA1

c2d40c02ba69cfee3e1768df0b450cde19b1ef2b
SHA256

139c2c18ec07e0eda940b82f600a4ff88d41a421be1a0703244e138458c0d091
SHA512

c401489236e5620e75cbe4ec9209983f0f0e899431a15598590825f1c10edda841777b6388028ac817128cbbb8b802135d1a8d3806d4a2e5877c1a9b484f11dd
SSDEEP

1536:scSQno2eyQazbkFXJ/JCjhqQwFJw0+fTE+ZQn:scZno2Y8bk9Cj0d4TxQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78fac7c1b14f37536b0edb1d6fb4fb0_NeikiAnalytics

Files

a78fac7c1b14f37536b0edb1d6fb4fb0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

1b852126f5bfc4e462faf967a0131e12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetLastError

msvcrt

longjmp
atoi
??2@YAPAXI@Z
_setjmp3
fprintf
strncmp
fputc
atof
_ftol
_iob
__CxxFrameHandler
??3@YAXPAX@Z
fseek
fopen
printf
malloc
free
calloc
__dllonexit
_onexit
_initterm
_adjust_fdiv
ftell
fread
fclose

Exports

Exports

fxpdfparser_epilog
fxpdfparser_get_array_size
fxpdfparser_get_catalog
fxpdfparser_get_int
fxpdfparser_get_mem_size
fxpdfparser_get_message
fxpdfparser_get_name
fxpdfparser_get_obj_from_array
fxpdfparser_get_obj_from_dict
fxpdfparser_get_str
fxpdfparser_get_str_size
fxpdfparser_get_total_page
fxpdfparser_is_array
fxpdfparser_is_dict
fxpdfparser_is_int
fxpdfparser_is_name
fxpdfparser_is_str
fxpdfparser_parse
fxpdfparser_prolog

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b852126f5bfc4e462faf967a0131e12

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 73KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 73KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 4KB - Virtual size: 3KB