General

Malware Config

Signatures

Files

• 7824cffda45b696a285c8b1b947e9180_NeikiAnalytics.exe

  .exe windows:4 windows x86 arch:x86

  c2a09daeccde53ea3a3eb85ad8eaeb75

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  e:\fx19rel\WINNT_5.2_Depend\mozilla\obj-fx-trunk\toolkit\crashreporter\client\crashreporter.pdb

  Imports

  kernel32

  GetModuleFileNameW

  DeleteFileW

  MoveFileW

  LoadLibraryW

  GetModuleHandleW

  LocalFree

  MultiByteToWideChar

  GlobalFree

  GetSystemTime

  WideCharToMultiByte

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  CloseHandle

  QueryPerformanceCounter

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetStartupInfoW

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  Sleep

  InterlockedExchange

  InterlockedCompareExchange

  InterlockedDecrement

  InterlockedIncrement

  CreateProcessW

  GlobalAlloc

  GetProcAddress

  FreeLibrary

  GetFileAttributesW

  GetLastError

  WaitForSingleObject

  FormatMessageW

  GlobalLock

  GlobalUnlock

  CreateDirectoryW

  GetTickCount

  CreateThread

  user32

  LoadIconW

  GetDC

  IsWindowEnabled

  SendDlgItemMessageW

  FillRect

  EndPaint

  SetPropW

  EnableWindow

  EndDialog

  GetWindowLongW

  SetWindowTextW

  GetClipboardData

  GetSysColor

  CallWindowProcW

  OpenClipboard

  CheckDlgButton

  PostMessageW

  DrawTextW

  MessageBoxW

  ChildWindowFromPoint

  GetWindowTextW

  ShowWindow

  GetSysColorBrush

  GetClientRect

  MapWindowPoints

  IsDlgButtonChecked

  GetPropW

  SetFocus

  CloseClipboard

  GetDlgItemTextW

  MoveWindow

  SetDlgItemTextW

  SetTimer

  BeginPaint

  GetFocus

  GetDlgItem

  SendMessageW

  InvalidateRect

  RemovePropW

  DialogBoxParamW

  IsClipboardFormatAvailable

  SetWindowLongW

  GetWindowRect

  gdi32

  SetTextColor

  GetTextExtentPoint32W

  SetBkMode

  SelectObject

  GetStockObject

  advapi32

  RegSetValueExW

  RegCloseKey

  RegOpenKeyW

  RegCreateKeyW

  RegQueryValueExW

  comctl32

  InitCommonControlsEx

  shell32

  SHGetFolderPathW

  wininet

  InternetConnectW

  InternetReadFile

  InternetCloseHandle

  HttpSendRequestW

  HttpAddRequestHeadersW

  HttpQueryInfoW

  InternetQueryDataAvailable

  HttpOpenRequestW

  InternetOpenW

  InternetCrackUrlW

  shlwapi

  PathAppendW

  mozcrt19

  _initterm

  _wcmdln

  exit

  _XcptFilter

  _exit

  _cexit

  __wgetmainargs

  _amsg_exit

  _decode_pointer

  _onexit

  _configthreadlocale

  __setusermatherr

  _adjust_fdiv

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler4_common

  ?terminate@@YAXXZ

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  _crt_debugger_hook

  _controlfp_s

  _putenv

  _initterm_e

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  abort

  _free_locale

  _get_osplatform

  _wfsopen

  wcstombs_s

  _fsopen

  _invoke_watson

  ??_V@YAXPAX@Z

  localeconv

  ?what@exception@std@@UBEPBDXZ

  ??1exception@std@@UAE@XZ

  ??0exception@std@@QAE@XZ

  ??0exception@std@@QAE@ABQBD@Z

  ??2@YAPAXI@Z

  ??0exception@std@@QAE@ABV01@@Z

  rand

  __argc

  srand

  strcspn

  wcslen

  _localtime64

  ??3@YAXPAX@Z

  getenv

  strcpy

  sprintf_s

  strftime

  fclose

  _invalid_parameter_noinfo

  memcmp

  memchr

  _snprintf

  free

  _time64

  __wargv

  memcpy_s

  memset

  ??1bad_cast@std@@UAE@XZ

  strcat

  ??0bad_cast@std@@QAE@PBD@Z

  ??0bad_cast@std@@QAE@ABV01@@Z

  malloc

  fwrite

  memmove_s

  strlen

  fgetpos

  fflush

  fseek

  fsetpos

  fgetc

  wcscpy

  ungetc

  wcsrchr

  fputc

  ceil

  sprintf

  setvbuf

  wcsncpy_s

  fscanf_s

  fgets

  fprintf

  strcmp

  _wfopen_s

  fputs

  wcscmp

  wcstol

  swprintf_s

  ___lc_codepage_func

  ___lc_handle_func

  __CxxFrameHandler3

  _CxxThrowException

  setlocale

  __crtLCMapStringA

  __pctype_func

  islower

  isupper

  memcpy

  _calloc_crt

  __uncaught_exception

  _strdup

  Sections

  .text

  Size: 59KB - Virtual size: 59KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 96KB - Virtual size: 96KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ