ab7d502dccb30416704b38c7c471ff30_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

ab7d502dccb30416704b38c7c471ff30_NeikiAnalytics
Size

12KB
MD5

ab7d502dccb30416704b38c7c471ff30
SHA1

cb439f3a48dbc21e159c315e1cb16c1d170a49a2
SHA256

0d28f15a56d68b4989f7665d1aa2b5fabca2a3626d3c92eaff9aa0ce83940f22
SHA512

364ff8c6259869926746df8b6ce97bb322487cb4ce33f2d099adbc651147dba181e817c2ecb222354e3a90aaf22ce90c62d7aae667a3a964664d80d2cac201d6
SSDEEP

384:EneCMhME1hMEuCv/ENbSF9yDzebHx7Rjcdqvc7rFmIX/Q:ErMSE1SEuCvr9szebtRjePQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab7d502dccb30416704b38c7c471ff30_NeikiAnalytics

Files

ab7d502dccb30416704b38c7c471ff30_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

d596e45c8625813db43960309782c6a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
Sleep
GetProcAddress
AddAtomA
AddAtomW
AllocConsole
AreFileApisANSI
BackupRead
BackupSeek
CreateWaitableTimerA
CreateWaitableTimerW
DefineDosDeviceW
DeleteAtom
DeviceIoControl
DisableThreadLibraryCalls
DosDateTimeToFileTime
DuplicateHandle
EndUpdateResourceA
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoA
EnumCalendarInfoW
EnumDateFormatsA
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceNamesW
EnumResourceTypesW
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLocalesA
EnumSystemLocalesW

user32

AdjustWindowRect
AdjustWindowRectEx
AnyPopup
AppendMenuA
AppendMenuW
ArrangeIconicWindows
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BringWindowToTop
BroadcastSystemMessageA
BroadcastSystemMessageW
CallMsgFilterW
CallWindowProcA
CascadeWindows
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeMenuA
ChangeMenuW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextA
CharNextW
CharPrevA
CharPrevExA
CharToOemA
CharToOemBuffW
CharToOemW
CharUpperA
CharUpperBuffA
CharUpperW
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ChildWindowFromPointEx
CloseDesktop
CloseWindow
CloseWindowStation
CopyAcceleratorTableW
CopyIcon
CopyImage
CopyRect
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateCaret
CreateCursor
CreateDesktopA
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateIcon
CreateIconFromResource
CreateIconFromResourceEx
CreateMDIWindowA
CreateMDIWindowW
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
CreateWindowStationA
CreateWindowStationW
DdeAbandonTransaction
DdeAccessData
DdeAddData
DdeClientTransaction
DdeConnect
DdeCreateDataHandle
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeDisconnect
DdeDisconnectList
DdeEnableCallback
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeImpersonateClient
DdeInitializeW
DdeKeepStringHandle
DdePostAdvise
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringA
DdeQueryStringW
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DdeUninitialize
DefDlgProcA
DefDlgProcW
DefFrameProcA
DefFrameProcW
DefWindowProcA
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawEdge
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawStateW
DrawTextA

Exports

Exports

?aewtrwtwaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkaslkjdfakdfljsalfdddddddddddddddjal1@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkewrwerwrwjal4@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?wtrwtwetwetwtaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
fafkewrwerwrwjal
fafkewrwerwrwjal1
fafkewrwerwrwjal2
fafkewrwerwrwjal3
rundll23
rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d596e45c8625813db43960309782c6a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 288B

.reloc Size: 1024B - Virtual size: 776B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 288B

.reloc
Size: 1024B - Virtual size: 776B