08e0cf41d1198874f7b9ec79ca919c80_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

08e0cf41d1198874f7b9ec79ca919c80_NeikiAnalytics
Size

88KB
MD5

08e0cf41d1198874f7b9ec79ca919c80
SHA1

6b75a3fc9729807d42125319563fdac220b29747
SHA256

ef3e436a19beaef5fa2c4cfe959add35e01c29c2cd50ff361a813bce91334103
SHA512

7ee0272e321d91cf8d2f1a93303ab3ae7e686a29b1e5f97e76710899f85b68ae19eedd0d241825017c6007268cafcae46685c1a6f70d54bd3b483b94af323ac7
SSDEEP

1536:pXAJSWqWA2MvoS3Rghwb/0bSHgK/qcWbDa3fNqyDa3fNqeDa3fNqg:uJPjfS3RByK/q5y3fNI3fNc3fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08e0cf41d1198874f7b9ec79ca919c80_NeikiAnalytics

Files

08e0cf41d1198874f7b9ec79ca919c80_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3cb9a4e3716780d304225797079d829a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glFogi
glTranslatef
glVertex2dv
glRasterPos3d
glIsList
glColor3ubv
glRasterPos4d

glu32

gluScaleImage
gluEndTrim
gluGetTessProperty
gluUnProject
gluQuadricNormals

user32

IsIconic
GetForegroundWindow
FindWindowA
ChildWindowFromPoint
IsWindowVisible
DefDlgProcA
AnyPopup
GetWindowTextLengthA
DialogBoxIndirectParamA
GetNextDlgGroupItem

ole32

CoRegisterSurrogate
PropStgNameToFmtId
StgIsStorageILockBytes
OleCreateStaticFromData
RegisterDragDrop
CreateFileMoniker
CLSIDFromProgID
DoDragDrop
BindMoniker

advapi32

CloseEventLog
RegCreateKeyA
NotifyChangeEventLog
OpenThreadToken

urlmon

RegisterBindStatusCallback

kernel32

LocalAlloc
IsBadStringPtrA
LocalReAlloc
GetCPInfo
VirtualProtect
LocalHandle
GetDateFormatA
CreateEventA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetEnvironmentVariableA
OpenEventA
GetCurrentThreadId
CreateSemaphoreA
GetExitCodeThread
GetCurrentProcessId
GetHandleInformation
GetComputerNameA
LocalLock
TlsGetValue
GetProcessHeap
VirtualAlloc
GetStartupInfoA

activeds

ord15
ord9
ord3
ord14
ord8
ord18
ord12
ord13
ord16
ord21
ord6
ord23

comdlg32

GetOpenFileNameW
ChooseFontW
ChooseColorA
PrintDlgW
GetOpenFileNameA
ReplaceTextW

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kfjdyt
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cb9a4e3716780d304225797079d829a

Headers

File Characteristics

Imports

opengl32

glu32

user32

ole32

advapi32

urlmon

kernel32

activeds

comdlg32

msvcrt

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 4KB

.kfjdyt Size: 3KB - Virtual size: 2KB

.rsrc Size: 70KB - Virtual size: 69KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 4KB

.kfjdyt
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 70KB - Virtual size: 69KB

.reloc
Size: 1KB - Virtual size: 1KB