bba66b873316cf761ae9dc3c34769550_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

bba66b873316cf761ae9dc3c34769550_NeikiAnalytics
Size

9KB
MD5

bba66b873316cf761ae9dc3c34769550
SHA1

6eb96b59e45ff795461341faa7c6ece3a1821481
SHA256

08015e6e34027e0ca690ee2ccca38228a63092b0e9351997e0b992d946c765f0
SHA512

cb8054eb7efb932dc26925936382f4b32314bb01508f4006cef970b701210c8dc27d0e52edf6bad51af19aa32380754e90d557f148acb3397c4f44b6bb905c6f
SSDEEP

192:Enekfu3hME1hMEuCv/ENbSrbFzCcyssPPP7eDPHnx7I4:EneCMhME1hMEuCv/ENbSF9yDzebHx7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba66b873316cf761ae9dc3c34769550_NeikiAnalytics

Files

bba66b873316cf761ae9dc3c34769550_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

d596e45c8625813db43960309782c6a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
Sleep
GetProcAddress
AddAtomA
AddAtomW
AllocConsole
AreFileApisANSI
BackupRead
BackupSeek
CreateWaitableTimerA
CreateWaitableTimerW
DefineDosDeviceW
DeleteAtom
DeviceIoControl
DisableThreadLibraryCalls
DosDateTimeToFileTime
DuplicateHandle
EndUpdateResourceA
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoA
EnumCalendarInfoW
EnumDateFormatsA
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceNamesW
EnumResourceTypesW
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLocalesA
EnumSystemLocalesW

user32

AdjustWindowRect
AdjustWindowRectEx
AnyPopup
AppendMenuA
AppendMenuW
ArrangeIconicWindows
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BringWindowToTop
BroadcastSystemMessageA
BroadcastSystemMessageW
CallMsgFilterW
CallWindowProcA
CascadeWindows
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeMenuA
ChangeMenuW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextA
CharNextW
CharPrevA
CharPrevExA
CharToOemA
CharToOemBuffW
CharToOemW
CharUpperA
CharUpperBuffA
CharUpperW
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ChildWindowFromPointEx
CloseDesktop
CloseWindow
CloseWindowStation
CopyAcceleratorTableW
CopyIcon
CopyImage
CopyRect
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateCaret
CreateCursor
CreateDesktopA
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateIcon
CreateIconFromResource
CreateIconFromResourceEx
CreateMDIWindowA
CreateMDIWindowW
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
CreateWindowStationA
CreateWindowStationW
DdeAbandonTransaction
DdeAccessData
DdeAddData
DdeClientTransaction
DdeConnect
DdeCreateDataHandle
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeDisconnect
DdeDisconnectList
DdeEnableCallback
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeImpersonateClient
DdeInitializeW
DdeKeepStringHandle
DdePostAdvise
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringA
DdeQueryStringW
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DdeUninitialize
DefDlgProcA
DefDlgProcW
DefFrameProcA
DefFrameProcW
DefWindowProcA
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawEdge
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawStateW
DrawTextA

Exports

Exports

?aewtrwtwaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkaslkjdfakdfljsalfdddddddddddddddjal1@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkewrwerwrwjal4@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?wtrwtwetwetwtaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
fafkewrwerwrwjal
fafkewrwerwrwjal1
fafkewrwerwrwjal2
fafkewrwerwrwjal3
rundll23
rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d596e45c8625813db43960309782c6a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 288B

.reloc Size: 1024B - Virtual size: 776B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 288B

.reloc
Size: 1024B - Virtual size: 776B