627ac1a1f1e30b17805a763b9129ba40_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

627ac1a1f1e30b17805a763b9129ba40_NeikiAnalytics
Size

291KB
MD5

627ac1a1f1e30b17805a763b9129ba40
SHA1

d93f0f4638daffc8fd9a4a7e3cb63879e76a22a6
SHA256

17e93f1eda47b9d7279e7539ca764ea5489c53290ff79bdb55bd150caa7470d2
SHA512

6f9906602a63c62d64e12899ac68122da296155c9697ae2822a7f496df7ca31a3c6719ac0317a6248d5daf5469608e96323ded35fa33623178759a29202ffe01
SSDEEP

6144:Kan11Y/ftm2OtFoNgUYW5gk78aHZzvLSA+yvYvZH:KaEioCPu78aHZ6UMZH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627ac1a1f1e30b17805a763b9129ba40_NeikiAnalytics

Files

627ac1a1f1e30b17805a763b9129ba40_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

446cca51b3aa3657d3c5116e5ebb2b9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

meta_dll

ord12001
ord9919
ord12105
ord12104
ord12003
ord243

mfc90

ord1603
ord3718
ord582
ord783
ord3491
ord6707
ord571
ord817
ord1254
ord1258
ord310
ord941
ord945
ord6114
ord3580
ord464
ord5890
ord1037
ord5872
ord1252
ord6149
ord820
ord1100
ord1062
ord300
ord612
ord712
ord6490
ord335
ord266
ord798
ord2539
ord601
ord316
ord265
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4392
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord5997
ord6675
ord6681
ord6676
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4029
ord800
ord605
ord1278
ord321
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1087
ord6682
ord2481
ord4199

msvcr90

_CxxThrowException
memset
strcat_s
memcpy
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
strncpy_s
strtoul
strstr
fgets
feof
fwrite
fopen
floor
strrchr
fclose
sscanf_s
sprintf_s
strcpy_s
_beginthreadex
memmove_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_strtoui64
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
vsprintf_s
?what@exception@std@@UBEPBDXZ

kernel32

LocalFree
GetModuleFileNameA
OutputDebugStringA
CreateFileMappingA
MapViewOfFile
CreateEventA
UnmapViewOfFile
CloseHandle
SetEvent
WaitForMultipleObjects
ResetEvent
WaitForSingleObject
GetTickCount
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateMutexA
ReleaseMutex
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
LocalAlloc
GetLocalTime
ClearCommError
GetModuleHandleA
FormatMessageA
SetLastError
WriteFile
GetOverlappedResult
WaitCommEvent
GetLastError
ReadFile
PurgeComm
GetCommModemStatus
SetCommMask
SetCommTimeouts
SetCommState
GetCommState
SetupComm
CreateFileA

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

META_C2K_AfcConfig
META_C2K_AfcConfigEx_r
META_C2K_AfcConfig_r
META_C2K_AfcGetParam
META_C2K_AfcGetParam_r
META_C2K_CalInitNvram
META_C2K_CalInitNvramEx_r
META_C2K_CalInitNvram_r
META_C2K_ChangeBaudrate_r
META_C2K_CheckSIM1Inserted
META_C2K_CheckSIM1Inserted_r
META_C2K_CheckSIM2Inserted
META_C2K_CheckSIM2Inserted_r
META_C2K_ClearRfNvram
META_C2K_ClearRfNvram_r
META_C2K_ConnectWithTarget
META_C2K_ConnectWithTarget_r
META_C2K_DeInit
META_C2K_DebugOn_With_FilePath
META_C2K_DisconnectWithTarget
META_C2K_DisconnectWithTarget_r
META_C2K_EnableRxTxSpy
META_C2K_EnableRxTxSpy_r
META_C2K_FhcStart
META_C2K_FhcStart_r
META_C2K_FlushNvram
META_C2K_FlushNvram_r
META_C2K_GetCalibrationFlag_r
META_C2K_GetDLLVer
META_C2K_GetErrorString
META_C2K_GetSpi
META_C2K_GetSpi_r
META_C2K_GetTargetVerInfo_r
META_C2K_GetTemperatureAdc
META_C2K_GetTemperatureAdcEx_r
META_C2K_GetTemperatureAdc_r
META_C2K_Init
META_C2K_LoadLogFilter
META_C2K_LoadLogFilter_r
META_C2K_LoadMessage
META_C2K_LoadMessage_r
META_C2K_LogIq
META_C2K_LogIq_r
META_C2K_LoopbackTest_r
META_C2K_MPATestRelease
META_C2K_MPATestRelease_r
META_C2K_NsftExitTestMode
META_C2K_NsftExitTestMode_r
META_C2K_NsftGetFer
META_C2K_NsftGetFer_r
META_C2K_NsftListModeGetFer
META_C2K_NsftListModeGetFer_r
META_C2K_NsftListModeRssi_r
META_C2K_NsftListModeSetPower_r
META_C2K_NsftListModeStart
META_C2K_NsftListModeStart_r
META_C2K_NsftPowerUp
META_C2K_NsftPowerUp_r
META_C2K_NsftRssi_r
META_C2K_NsftSetTestMode
META_C2K_NsftSetTestMode_r
META_C2K_NsftTxTrafficChannel
META_C2K_NsftTxTrafficChannel_r
META_C2K_PocCalibration_r
META_C2K_PsPower
META_C2K_PsPower_r
META_C2K_QueryTargetCapability
META_C2K_QueryTargetCapability_r
META_C2K_ReadCurrentTemperature_r
META_C2K_ReadCurrentTxPower
META_C2K_ReadCurrentTxPowerEx_r
META_C2K_ReadCurrentTxPower_r
META_C2K_ReadMipi_r
META_C2K_ReadNvram
META_C2K_ReadNvramEx_r
META_C2K_ReadNvram_r
META_C2K_ReceiverCtrl
META_C2K_ReceiverCtrl_r
META_C2K_Rssi
META_C2K_Rssi_r
META_C2K_RxAgcSetGain
META_C2K_RxAgcSetGain_r
META_C2K_SendATCommand_r
META_C2K_SendCommand_r
META_C2K_SetCalibrationFlag_r
META_C2K_SetLoggingRelay_r
META_C2K_SetSpi
META_C2K_SetSpi_r
META_C2K_TransmitterCtrl
META_C2K_TransmitterCtrl_r
META_C2K_TxAgcConfig
META_C2K_TxAgcConfig_r
META_C2K_TxCdma
META_C2K_TxCdma_r
META_C2K_TxTone
META_C2K_TxTone_r
META_C2K_WaitResponse_r
META_C2K_WriteMipi_r
META_C2K_WriteNvram
META_C2K_WriteNvramEx_r
META_C2K_WriteNvram_r
META_MMC2K_AfcConfig_r
META_MMC2K_GetAfcData_r
META_MMC2K_GetBSI_r
META_MMC2K_GetDpdAmPmData_r
META_MMC2K_GetDpdPaData_r
META_MMC2K_GetMIPICodeWord_r
META_MMC2K_GetMeid_r
META_MMC2K_GetPowerDetectorResult_r
META_MMC2K_GetRxData_r
META_MMC2K_GetTargetGenType_r
META_MMC2K_GetTxData_r
META_MMC2K_InitRfDriver_r
META_MMC2K_NsftEnterTestMode_r
META_MMC2K_NsftExitTestMode_r
META_MMC2K_NsftGetFer_r
META_MMC2K_NsftGetRssi_r
META_MMC2K_NsftListMode_r
META_MMC2K_NsftPowerUp_r
META_MMC2K_NsftSetTxPower_r
META_MMC2K_QueryTargetCapability_r
META_MMC2K_RegisterHandler_r
META_MMC2K_Rssi_r
META_MMC2K_RxAgcConfig_r
META_MMC2K_RxControl_r
META_MMC2K_SendCommand_r
META_MMC2K_SetAfcData_r
META_MMC2K_SetBSI_r
META_MMC2K_SetDpdAmPmData_r
META_MMC2K_SetDpdPaData_r
META_MMC2K_SetMIPICodeWord_r
META_MMC2K_SetMeid_r
META_MMC2K_SetRxAntennaMode_r
META_MMC2K_SetRxData_r
META_MMC2K_SetTargetGenType_r
META_MMC2K_SetTxData_r
META_MMC2K_StartFhc_r
META_MMC2K_TxAgcConfig_r
META_MMC2K_TxControl_r
META_MMC2K_UbinModeSetup_r

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 182KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

446cca51b3aa3657d3c5116e5ebb2b9e

Headers

DLL Characteristics

File Characteristics

Imports

version

meta_dll

mfc90

msvcr90

kernel32

oleaut32

msvcp90

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 1024B - Virtual size: 276KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 6KB - Virtual size: 6KB

.text Size: 182KB - Virtual size: 184KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 1024B - Virtual size: 276KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 182KB - Virtual size: 184KB