General

Malware Config

Signatures

Files

• fc10ec56258ffe23bb01cb1a33329200_NeikiAnalytics.exe

  .exe windows:4 windows x86 arch:x86

  31e3bb36aa02ba91eee6fb2267225368

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  t:\misc\x86\ship\0\selfcert.pdb

  Imports

  kernel32

  GetSystemDefaultLCID

  GetACP

  GetUserDefaultLangID

  GetSystemDefaultUILanguage

  GetSystemDefaultLangID

  LoadLibraryW

  GetModuleFileNameW

  GetStringTypeExW

  GetLocalTime

  SystemTimeToFileTime

  LocalFileTimeToFileTime

  FileTimeToSystemTime

  GetLastError

  GetCommandLineW

  lstrlenW

  GlobalFree

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetStartupInfoW

  InterlockedCompareExchange

  InterlockedExchange

  GetTempPathA

  GetTempFileNameA

  QueryPerformanceCounter

  VirtualProtect

  GetUserDefaultUILanguage

  GetCalendarInfoW

  EnumSystemLocalesW

  EnumUILanguagesW

  IsProcessorFeaturePresent

  ReleaseSemaphore

  GlobalMemoryStatus

  GetCurrentThread

  GetProcessHeap

  HeapFree

  HeapSize

  HeapValidate

  HeapAlloc

  HeapReAlloc

  GetModuleHandleA

  VirtualAlloc

  RaiseException

  TlsSetValue

  SetLastError

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  VirtualFree

  TlsGetValue

  TlsFree

  DeleteCriticalSection

  GetModuleHandleW

  GetProcAddress

  GetFileAttributesW

  GetVersion

  MultiByteToWideChar

  WideCharToMultiByte

  LoadLibraryA

  OutputDebugStringA

  MulDiv

  EnterCriticalSection

  LeaveCriticalSection

  GetVersionExA

  IsValidLocale

  FreeLibrary

  WaitForSingleObject

  ReleaseMutex

  CloseHandle

  GetSystemTimeAsFileTime

  GetTickCount

  WriteFile

  SetFileAttributesW

  FlushFileBuffers

  DeleteFileW

  GetFileType

  CreateFileW

  GetLocaleInfoW

  ExpandEnvironmentStringsW

  GetProcessTimes

  GetCurrentProcess

  CreateMutexA

  OpenMutexA

  CreateSemaphoreA

  GetShortPathNameA

  GetModuleFileNameA

  LoadLibraryExW

  GetSystemDirectoryW

  GetVersionExW

  GetTimeZoneInformation

  GetDiskFreeSpaceExW

  GetSystemInfo

  GetUserDefaultLCID

  LocalFree

  LocalAlloc

  CreateProcessA

  Sleep

  TerminateProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GlobalAlloc

  IsDBCSLeadByte

  IsValidCodePage

  CompareStringW

  InitializeCriticalSection

  CreateDirectoryW

  advapi32

  RegOpenKeyExA

  RegCreateKeyExW

  RegSetValueExW

  RegQueryInfoKeyW

  RegEnumKeyW

  GetLengthSid

  AddAccessAllowedAce

  AddAccessDeniedAce

  InitializeAcl

  CryptDestroyKey

  CryptGenKey

  CryptReleaseContext

  CryptAcquireContextW

  RegCloseKey

  RegEnumValueW

  RegOpenKeyExW

  RegQueryValueExW

  CopySid

  GetTokenInformation

  OpenProcessToken

  FreeSid

  SetSecurityDescriptorDacl

  InitializeSecurityDescriptor

  GetSecurityDescriptorDacl

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  ConvertSidToStringSidA

  CheckTokenMembership

  IsValidSid

  AllocateAndInitializeSid

  RegQueryValueExA

  OpenThreadToken

  gdi32

  DeleteDC

  GetDeviceCaps

  GetObjectW

  CreateFontIndirectW

  GetObjectA

  CreateFontIndirectA

  GetTextFaceW

  GetTextMetricsA

  GetOutlineTextMetricsA

  CreateSolidBrush

  TranslateCharsetInfo

  SelectObject

  GetTextExtentPoint32W

  CreatePen

  SetBkColor

  SetTextColor

  SetTextAlign

  TextOutW

  MoveToEx

  LineTo

  DeleteObject

  CreateDCA

  user32

  GetDlgItem

  LoadCursorW

  RegisterClassExW

  GetDC

  GetWindowTextW

  SetWindowPos

  ReleaseDC

  DialogBoxParamW

  BeginPaint

  GetClientRect

  GetSysColor

  GetFocus

  DrawFocusRect

  EndPaint

  InvalidateRect

  DefWindowProcW

  GetParent

  SendMessageW

  GetClassNameA

  SendMessageA

  IsWindowUnicode

  GetWindowLongA

  GetWindowLongW

  SetRectEmpty

  MapWindowPoints

  GetWindowRect

  MoveWindow

  IsWindowVisible

  SendDlgItemMessageW

  IsWindow

  CreateWindowExA

  CreateDialogIndirectParamA

  DrawTextA

  DrawTextW

  DestroyWindow

  MapDialogRect

  GetSystemMetrics

  SystemParametersInfoA

  GetMenuCheckMarkDimensions

  LoadBitmapA

  GetMonitorInfoA

  EnumDisplayMonitors

  GetKeyboardLayout

  MessageBoxW

  LoadIconW

  LoadStringW

  SetWindowTextW

  GetDlgCtrlID

  GetWindow

  EndDialog

  SetFocus

  ole32

  CoInitialize

  CoUninitialize

  CoCreateGuid

  CoCreateInstance

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueW

  secur32

  GetUserNameExW

  msvcr80

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  ?terminate@@YAXXZ

  _controlfp_s

  _invoke_watson

  _crt_debugger_hook

  _decode_pointer

  _onexit

  _lock

  __dllonexit

  _unlock

  _except_handler4_common

  __set_app_type

  _encode_pointer

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _configthreadlocale

  _initterm_e

  _initterm

  _wcmdln

  exit

  _XcptFilter

  _exit

  _cexit

  __wgetmainargs

  _amsg_exit

  fopen_s

  fwprintf_s

  fclose

  vsprintf_s

  wcscpy_s

  vswprintf_s

  wcsrchr

  _wtoi

  _wcsicmp

  _CxxThrowException

  _vsnprintf

  __CxxFrameHandler3

  memmove

  _CIsqrt

  memcpy

  memset

  _vsnwprintf

  shlwapi

  wnsprintfA

  rpcrt4

  UuidCreate

  Sections

  .text

  Size: 273KB - Virtual size: 272KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 197KB - Virtual size: 220KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE