d5c68b01065b46a1eaf37059e13768a0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

d5c68b01065b46a1eaf37059e13768a0_NeikiAnalytics
Size

627KB
MD5

d5c68b01065b46a1eaf37059e13768a0
SHA1

a34b784bac39a93eadbbdb7063c2f7e9bfcf082b
SHA256

7de7670cd5754230586bb0d371fd4148def15db66225243ee09f4b7f05ee8e39
SHA512

a4b11ffe4d3cdfdb4ed1b891e96fedff3b6e45745814a3022ae406c73f2f227c8aa227dd954b11a282c32cd2c1f2b21a664f2afb155d370ae1754e6e50d233b0
SSDEEP

12288:bAh6xWX29ZQO9J7QRJ5G76+enk5DLYfDkJQ9DFEp:bAh6R9mO9J7QRJ5G76+ek9LYfDkJQ1ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c68b01065b46a1eaf37059e13768a0_NeikiAnalytics

Files

d5c68b01065b46a1eaf37059e13768a0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

893031fd14e1615b74bad1d2fbd80e5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

imm32

ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetContext
ImmGetDescriptionA
ImmGetOpenStatus
ImmNotifyIME
ImmReleaseContext
ImmSetOpenStatus

sdl_image

IMG_Load

sdl

SDL_ConvertSurface
SDL_CreateCursor
SDL_CreateRGBSurface
SDL_CreateThread
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_FillRect
SDL_FreeCursor
SDL_FreeSurface
SDL_GetAppState
SDL_GetError
SDL_GetKeyState
SDL_GetMouseState
SDL_GetTicks
SDL_GetWMInfo
SDL_Init
SDL_InitSubSystem
SDL_JoystickClose
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetHat
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickUpdate
SDL_KillThread
SDL_ListModes
SDL_LoadBMP_RW
SDL_LockAudio
SDL_NumJoysticks
SDL_PollEvent
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFile
SDL_SetCursor
SDL_SetError
SDL_SetModuleHandle
SDL_SetVideoMode
SDL_ShowCursor
SDL_UnlockAudio
SDL_UpdateRect
SDL_UpperBlit
SDL_WM_GrabInput
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WaitThread
SDL_WarpMouse
SDL_strlcat
SDL_strlcpy

sdl_mixer

Mix_CloseAudio
Mix_OpenAudio
Mix_AllocateChannels
Mix_PlayingMusic
Mix_FreeMusic
Mix_Playing
Mix_FreeChunk
Mix_Volume
Mix_QuickLoad_RAW
Mix_LoadWAV_RW
Mix_LoadMUS
Mix_VolumeMusic
Mix_GetMusicType
Mix_HaltMusic
Mix_HaltChannel
Mix_RewindMusic
Mix_SetMusicPosition
Mix_SetPosition
Mix_ResumeMusic
Mix_PlayMusic
Mix_Resume
Mix_PlayChannelTimed
Mix_PauseMusic
Mix_Pause
Mix_HookMusic

sdl_net

SDLNet_CheckSockets
SDLNet_TCP_Recv
SDLNet_DelSocket
SDLNet_FreeSocketSet
SDLNet_TCP_Close
SDLNet_TCP_Send
SDLNet_Init
SDLNet_ResolveHost
SDLNet_TCP_GetPeerAddress
SDLNet_TCP_Open
SDLNet_TCP_Accept
SDLNet_AllocSocketSet
SDLNet_AddSocket

sdl_ttf

TTF_OpenFont
TTF_FontHeight
TTF_CloseFont
TTF_SetFontStyle
TTF_FontFaceIsFixedWidth
TTF_RenderUNICODE_Solid
TTF_RenderUNICODE_Shaded
TTF_RenderUTF8_Shaded
TTF_Quit
TTF_Init

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
DeleteObject
EndDoc
EndPage
GetDIBits
GetDeviceCaps
SelectObject
SetDIBitsToDevice
SetPixel
StartDocA
StartPage
TextOutA

kernel32

AllocConsole
ClearCommError
CloseHandle
CreateFileA
CreateProcessA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
FreeConsole
FreeLibrary
GetCommState
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExA
GetFileAttributesA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LockFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetCommState
SetCommTimeouts
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnlockFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WinExec
WriteFile
lstrlenA

msvcrt

_chdir
_mkdir
_putenv
_rmdir
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_environ
_errno
_fmode
_initterm
_iob
_isctype
_lock
_lrotl
_onexit
_pctype
_unlock
_winmajor
abort
atan2
calloc
ceil
exit
fclose
fgetc
floor
fopen
fprintf
free
freopen
frexp
fwrite
getc
getenv
islower
isprint
isspace
isupper
isxdigit
localeconv
localtime
malloc
memchr
memcpy
memmove
memset
realloc
remove
rename
setbuf
setvbuf
signal
sprintf
sscanf
strcmp
strlen
strncmp
strncpy
strrchr
strtol
strtoul
system
time
tolower
ungetc
vfprintf

user32

CallWindowProcA
CloseClipboard
EmptyClipboard
GetClientRect
GetClipboardData
GetDC
GetDesktopWindow
GetKeyState
GetKeyboardLayout
GetWindowLongA
GetWindowRect
IsClipboardFormatAvailable
MessageBoxA
OpenClipboard
ReleaseDC
SendInput
SetClipboardData
SetWindowLongA
SetWindowPos
ShowWindow
TranslateMessage
VkKeyScanA

winspool.drv

GetDefaultPrinterA

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister
__divdi3
__moddi3
__udivdi3

libstdc++-6

_ZNKSi6gcountEv
_ZNSi4readEPci
_ZNSi5seekgExSt12_Ios_Seekdir
_ZNSi5tellgEv
_ZNSo5writeEPKci
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE5closeEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE7is_openEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEEC1Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt14basic_ofstreamIcSt11char_traitsIcEE5closeEv
_ZNSt14basic_ofstreamIcSt11char_traitsIcEE7is_openEv
_ZNSt14basic_ofstreamIcSt11char_traitsIcEEC1Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__gxx_personality_sj0

Exports

Exports

InputMethod_GetCurrentChar
InputMethod_GetCurrentCompositionLength
InputMethod_GetCurrentCompositionPosition
InputMethod_GetCurrentCursorPosition
InputMethod_GetCurrentEditingString
InputMethod_GetCurrentMessage
InputMethod_GetEventNumber
InputMethod_GetInputMethodName
InputMethod_Init
InputMethod_InitFromOther
InputMethod_Invalidate
InputMethod_MoveNextEvent
InputMethod_PostEvent
InputMethod_Quit
InputMethod_Reset
InputMethod_Validate
SDL_Delay

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

893031fd14e1615b74bad1d2fbd80e5a

Headers

File Characteristics

Imports

imm32

sdl_image

sdl

sdl_mixer

sdl_net

sdl_ttf

gdi32

kernel32

msvcrt

user32

winspool.drv

libgcc_s_sjlj-1

libstdc++-6

Exports

Exports

Sections

.text Size: 466KB - Virtual size: 466KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 81KB - Virtual size: 81KB

.bss Size: - Virtual size: 5.6MB

.edata Size: 1024B - Virtual size: 670B

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 63KB - Virtual size: 63KB

.text
Size: 466KB - Virtual size: 466KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 81KB - Virtual size: 81KB

.bss
Size: - Virtual size: 5.6MB

.edata
Size: 1024B - Virtual size: 670B

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 63KB - Virtual size: 63KB