ce0e95d96c66af3f4e0d213dc576f750_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

ce0e95d96c66af3f4e0d213dc576f750_NeikiAnalytics
Size

816KB
MD5

ce0e95d96c66af3f4e0d213dc576f750
SHA1

bf8ee040dd1ae8bbf543796eec3dee12b286abd8
SHA256

0f6b28498adf7f5b7e6d8ccaffc15b8d3d529dd5f5274acc893525beca557211
SHA512

953265fc799bf8f3e60d872479746f82dbb6cee523691adfe82429a6333e8b32b0342b1d5188075389d909ffae63faade39aa0157ff05d21c7f904a83cc776ff
SSDEEP

12288:mJkPW0SBHOlfRunkfADewc+zfRiDzLlc8xXJ:k0SElpunkoywcSYflcYXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce0e95d96c66af3f4e0d213dc576f750_NeikiAnalytics

Files

ce0e95d96c66af3f4e0d213dc576f750_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

d4a49c1cd5c35588611c50c96bc70ed0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

freetype

FT_Init_FreeType
FT_Open_Face
FT_Property_Set
FT_Library_SetLcdFilter
FT_Outline_Embolden
FT_Outline_Translate
FT_Outline_Get_CBox
FT_Outline_Decompose
FT_Activate_Size
FT_Outline_Get_BBox
FT_Matrix_Multiply
FT_MulFix
FT_Get_Char_Index
FT_Render_Glyph
FT_Set_Transform
FT_Load_Glyph
FT_Set_Char_Size
FT_New_Memory_Face
FT_Done_FreeType
FT_Done_Face

java

JNU_ThrowArrayIndexOutOfBoundsException
JNU_NewStringPlatform
JNU_ThrowInternalError
JNU_ThrowOutOfMemoryError

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumValueW

user32

FillRect
GetWindowDC
GetDesktopWindow
ReleaseDC
GetDC
SystemParametersInfoA

gdi32

GetDIBits
GetDeviceCaps
DeleteObject
CreateFontIndirectW
GetGlyphOutlineA
CreateCompatibleBitmap
EnumFontFamiliesExW
SetTextColor
GetTextMetricsA
ExtTextOutW
GetFontData
GetStockObject
SelectObject
CreateCompatibleDC
SetMapMode
SetBkColor

awt

GrPrim_Sg2dGetCompInfo
GrPrim_Sg2dGetClip
GrPrim_Sg2dGetPixel
SurfaceData_GetOps
GetNativePrim
SurfaceData_InitOps
GrPrim_Sg2dGetEaRGB
AccelGlyphCache_RemoveAllCellInfos
GrPrim_Sg2dGetLCDTextContrast
SurfaceData_IntersectBounds

kernel32

GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentThreadId
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSection
GetSystemDirectoryA
GetWindowsDirectoryA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TerminateProcess
UnhandledExceptionFilter

vcruntime140

memset
strrchr
wcsrchr
strstr
memcpy
memmove
strchr
memcmp
__C_specific_handler
__std_type_info_destroy_list
wcsstr

api-ms-win-crt-heap-l1-1-0

realloc
calloc
malloc
free

api-ms-win-crt-math-l1-1-0

sqrt
pow
floor
cosf
sinf
tanf
_hypotf
floorf
ceilf

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

strncpy
_wcsicmp
_stricmp
strncmp
strcmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_cexit
_initterm
_execute_onexit_table
_errno
_initterm_e

Exports

Exports

Java_sun_awt_Win32FontManager_getFontPath
Java_sun_awt_Win32FontManager_populateFontFileNameMap0
Java_sun_font_ColorGlyphSurfaceData_initOps
Java_sun_font_ColorGlyphSurfaceData_setCurrentGlyph
Java_sun_font_FileFontStrike__1getGlyphImageFromWindows
Java_sun_font_FileFontStrike_initNative
Java_sun_font_FreetypeFontScaler_createScalerContextNative
Java_sun_font_FreetypeFontScaler_disposeNativeScaler
Java_sun_font_FreetypeFontScaler_getFontMetricsNative
Java_sun_font_FreetypeFontScaler_getGlyphAdvanceNative
Java_sun_font_FreetypeFontScaler_getGlyphCodeNative
Java_sun_font_FreetypeFontScaler_getGlyphImageNative
Java_sun_font_FreetypeFontScaler_getGlyphMetricsNative
Java_sun_font_FreetypeFontScaler_getGlyphOutlineBoundsNative
Java_sun_font_FreetypeFontScaler_getGlyphOutlineNative
Java_sun_font_FreetypeFontScaler_getGlyphPointNative
Java_sun_font_FreetypeFontScaler_getGlyphVectorOutlineNative
Java_sun_font_FreetypeFontScaler_getMissingGlyphCodeNative
Java_sun_font_FreetypeFontScaler_getNumGlyphsNative
Java_sun_font_FreetypeFontScaler_getUnitsPerEMNative
Java_sun_font_FreetypeFontScaler_initIDs
Java_sun_font_FreetypeFontScaler_initNativeScaler
Java_sun_font_NullFontScaler_getGlyphImage
Java_sun_font_NullFontScaler_getNullScalerContext
Java_sun_font_StrikeCache_freeIntMemory
Java_sun_font_StrikeCache_freeIntPointer
Java_sun_font_StrikeCache_freeLongMemory
Java_sun_font_StrikeCache_freeLongPointer
Java_sun_font_StrikeCache_getGlyphCacheDescription
Java_sun_font_SunFontManager_initIDs
Java_sun_font_SunLayoutEngine_createFace
Java_sun_font_SunLayoutEngine_disposeFace
Java_sun_font_SunLayoutEngine_shape
Java_sun_java2d_loops_DrawGlyphListAA_DrawGlyphListAA
Java_sun_java2d_loops_DrawGlyphListLCD_DrawGlyphListLCD
Java_sun_java2d_loops_DrawGlyphList_DrawGlyphList
getSunFontIDs
isNullScalerContext

Sections

.text
Size: 554KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4a49c1cd5c35588611c50c96bc70ed0

Headers

DLL Characteristics

File Characteristics

Imports

freetype

java

advapi32

user32

gdi32

awt

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 554KB - Virtual size: 554KB

.rdata Size: 230KB - Virtual size: 230KB

.data Size: 3KB - Virtual size: 8KB

.pdata Size: 25KB - Virtual size: 24KB

_RDATA Size: 512B - Virtual size: 48B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 512B - Virtual size: 348B

.text
Size: 554KB - Virtual size: 554KB

.rdata
Size: 230KB - Virtual size: 230KB

.data
Size: 3KB - Virtual size: 8KB

.pdata
Size: 25KB - Virtual size: 24KB

_RDATA
Size: 512B - Virtual size: 48B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 512B - Virtual size: 348B