cbb74a0eb274e37ba77e643e745c8ee0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

cbb74a0eb274e37ba77e643e745c8ee0_NeikiAnalytics
Size

84KB
MD5

cbb74a0eb274e37ba77e643e745c8ee0
SHA1

17179a4ba6cc68412ed95397169fe48ff43a3e98
SHA256

4b2e43a8536984018114aa4d3d769be82e7aba3d9737689a3b5f623b05bd892d
SHA512

ffeb9ba160a979e5e8f0e9d11d69d903ca237cce676a141a7c2f925722c9e46c36db56dc9bc8a9ea21fea26eb32b2451f2217b72b4423bc3f943fcfef8082622
SSDEEP

1536:jzS7d8wATW80w5Yvc7sPgesOBKC9OFo6aZGONmRza:3AdHw5Yvcc0dC9Qo6aZpga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbb74a0eb274e37ba77e643e745c8ee0_NeikiAnalytics

Files

cbb74a0eb274e37ba77e643e745c8ee0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dc362af67c2d1d1d5b397c50eaa4940b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
SetLastError
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
WriteFile
GetCurrentProcess
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetLastError
SetHandleCount
GetProcAddress
GetVersion
lstrcpynA
LoadLibraryA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetStdHandle
GetFileType
FreeLibrary

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

comctl32

ord17

user32

EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
MessageBoxA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetCapture
WinHelpA
SystemParametersInfoA
IsIconic
RegisterWindowMessageA

gdi32

SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetClipBox

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

_Java_com_ibm_as400_opnav_ezcore_EZNativeInterface_getCommonWritablePath@12
_Java_com_ibm_as400_opnav_ezcore_EZNativeInterface_getMRIPath@8
_Java_com_ibm_as400_opnav_ezcore_EZNativeInterface_restoreConfigurationValues@12
_Java_com_ibm_as400_opnav_ezcore_EZNativeInterface_writeRebootKey@12

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc362af67c2d1d1d5b397c50eaa4940b

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 13KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 13KB

.reloc
Size: 12KB - Virtual size: 9KB