General

Malware Config

Signatures

Files

• 36480b21af32ce89b1c0ec98aea70a30_NeikiAnalytics.exe

  .exe windows:10 windows x86 arch:x86

  4d3d9e3816b934c1c708fdbdb8b3a190

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  XpsAnalyzer.pdb

  Imports

  kernel32

  InitializeCriticalSection

  DeleteCriticalSection

  WideCharToMultiByte

  LocalFree

  EnterCriticalSection

  MultiByteToWideChar

  LeaveCriticalSection

  GetProcAddress

  LoadLibraryW

  CloseHandle

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingW

  HeapSetInformation

  CreateFileW

  GetVersionExW

  SetConsoleTextAttribute

  GetStdHandle

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  GetTickCount

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  GetModuleHandleW

  SetUnhandledExceptionFilter

  OutputDebugStringA

  Sleep

  DebugBreak

  OutputDebugStringW

  GetLastError

  FindClose

  FindNextFileW

  GetFileSize

  FindFirstFileW

  msvcrt

  __setusermatherr

  __p__fmode

  _cexit

  _exit

  exit

  __set_app_type

  __wgetmainargs

  _amsg_exit

  __p__commode

  _XcptFilter

  _CxxThrowException

  _callnewh

  malloc

  free

  memmove_s

  printf

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@ABQBD@Z

  ??0exception@@QAE@XZ

  fclose

  fwrite

  fputwc

  ___mb_cur_max_func

  ??0bad_cast@@QAE@ABV0@@Z

  ??1bad_cast@@UAE@XZ

  fflush

  setvbuf

  fgetpos

  fseek

  fsetpos

  _initterm

  fgetc

  fgetwc

  ungetwc

  fputc

  _itow

  sprintf_s

  memset

  strcspn

  _wstat

  _wctime

  _errno

  ___lc_handle_func

  ___lc_codepage_func

  setlocale

  __pctype_func

  __mb_cur_max

  _fsopen

  _wfsopen

  isupper

  __crtLCMapStringA

  __crtLCMapStringW

  __crtGetStringTypeW

  islower

  abort

  __uncaught_exception

  memchr

  _ftol2_sse

  _ftol2

  ?terminate@@YAXXZ

  __CxxFrameHandler3

  wprintf

  _waccess

  ??1type_info@@UAE@XZ

  _controlfp

  _except_handler4_common

  _lock

  _unlock

  __dllonexit

  _onexit

  ungetc

  localeconv

  ??1exception@@UAE@XZ

  ?what@exception@@UBEPBDXZ

  _purecall

  _wcsicmp

  memcpy_s

  advapi32

  CryptAcquireContextW

  CryptHashData

  CryptGetHashParam

  CryptDestroyHash

  CryptReleaseContext

  CryptCreateHash

  ole32

  StgIsStorageFile

  CreateStreamOnHGlobal

  CoCreateInstance

  CoUninitialize

  CoInitialize

  CoTaskMemFree

  oleaut32

  VariantClear

  SysAllocString

  SysFreeString

  crypt32

  CertFreeCertificateContext

  Sections

  .text

  Size: 211KB - Virtual size: 210KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE