72b52a58599566a21ee09ecd6d3377b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

72b52a58599566a21ee09ecd6d3377b0_NeikiAnalytics.exe
Size

70KB
MD5

72b52a58599566a21ee09ecd6d3377b0
SHA1

d95db9785332de4229a63547af0bdf94d75a29cd
SHA256

762123b3179e62533b99bc675140fad09fd363d2003dc4b5b0aa3bf72e014f28
SHA512

f0bb11b84442e611804c07e66129470001e481d7d1c4d7c4d690eadf94bb448bc7b1eff4af0f531c9b163729fb0183d1f6a1fc5bf6333daa341246dc5aa70a71
SSDEEP

768:Bzjnn534OkYutdhX72qsy51exgjLSliJCbkXjXDHvdYDjjN3TOp1TP7GHhObYS:9bqFYubhLAV0rXjXDHvc3TOpxJsS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72b52a58599566a21ee09ecd6d3377b0_NeikiAnalytics.exe

Files

72b52a58599566a21ee09ecd6d3377b0_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

c85e85f257ea82a8c352ffbe4aa960c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

isbase

??1CisInterface@@UEAA@XZ
?GetExtraInfo@CisLotInfo@@UEBAHHAEAPEAXAEAH@Z
??1CisTesterInfo@@UEAA@XZ
?GetExtraInfo@CisTesterInfo@@UEAAHHAEAPEAXAEAH@Z
??1CisDrawable@@UEAA@XZ
?GetPixel@CisDrawable@@UEAAKHH@Z
?DrawCrossShort@CisDrawable@@UEAAXPEBUtagRECT@@HHHK@Z
?DrawCrossShort@CisDrawable@@UEAAXHHHHHK@Z
?DrawEllipse@CisDrawable@@UEAAXPEBUtagRECT@@HHK@Z
?DrawEllipse@CisDrawable@@UEAAXPEBUtagRECT@@PEAUHPEN__@@@Z
?DrawLine@CisDrawable@@UEAAXPEAUtagPOINT@@0HHK@Z
?DrawLine@CisDrawable@@UEAAXPEAUtagPOINT@@0PEAUHPEN__@@@Z
?DrawCross@CisDrawable@@UEAAXPEBUtagRECT@@HHK@Z
?DrawCross@CisDrawable@@UEAAXPEBUtagRECT@@PEAUHPEN__@@@Z
?DrawTextA@CisDrawable@@UEAAXPEBDHPEAUtagRECT@@IHK@Z
??1CisLotInfo@@UEAA@XZ
?DrawRect@CisDrawable@@UEAAXPEBUtagRECT@@HHK@Z
?DrawRect@CisDrawable@@UEAAXPEBUtagRECT@@PEAUHPEN__@@@Z
?DrawBitmap@CisDrawable@@UEAAHPEAUHBITMAP__@@H@Z
?DrawBitmap@CisDrawable@@UEAAHPEAEHHHH@Z
?DrawBitmap@CisDrawable@@UEAAHPEAVCImageProcessor@@H@Z
?DrawYUV@CisDrawable@@UEAAHPEAEHHHH@Z
?ReleaseDC@CisDrawable@@UEAAHXZ
?GetDC@CisDrawable@@UEAAPEAUHDC__@@XZ
?ClearOverlay@CisDrawable@@UEAAXXZ
?FinishDraw@CisDrawable@@UEAAXXZ
?StartDraw@CisDrawable@@UEAAHH@Z
?UpdateDraw@CisDrawable@@UEAAHW4UCI_VIDEO_FORMAT@@@Z
??1CisLogger@@UEAA@XZ
??1CisBinManager@@UEAA@XZ
?SetInspectionResult@CisInspection@@IEAAXH@Z
?Initialize@CisInspection@@MEAAHXZ
?InitializeReport@CisInspection@@UEAAHXZ
?GetReportErrorCodes@CisInspection@@UEAAPEBDXZ
?GetReportComparators@CisInspection@@UEAAPEBDXZ
?GetIcon@CisInspection@@UEBAQEAUHICON__@@XZ
?PostMeasure@CisInspection@@MEAAXXZ
?PreMeasure@CisInspection@@MEAAHXZ
??0CisInspection@@QEAA@PEBDW4IVI_INSPECTION_TYPE@0@W4IVI_INSPECTION_METHOD@0@PEAVCisInterface@@HPEAUHWND__@@4@Z
??0KEY@CisBinManager@@QEAA@XZ
??0KEY@CisBinManager@@QEAA@PEBVCisInspection@@PEBDW4BIN_TYPE@1@@Z
??4KEY@CisBinManager@@QEAAAEBV01@AEBV01@@Z
?SetOptionDialog@CisInspection@@IEAAPEAUHWND__@@PEAU2@@Z
??1CisInspection@@UEAA@XZ
?GetOption_ImageAcquisition@CisInspection@@QEBAPEBVCisOption_ImageAcquisition@1@XZ
?GetInspectionResult@CisInspection@@QEBAHXZ
?Finalize@CisInspection@@MEAAXXZ
?LoadOptions@CisInspection@@UEAAHXZ
?SaveOptions@CisInspection@@UEAAHXZ
?DrawTextA@CisDrawable@@UEAAXPEBDHPEAUtagRECT@@IPEAUHFONT__@@K@Z
?GetName@CisInspection@@QEBAPEBDXZ

imgproc

?getAutoThreshold@CImageProcessor@@QEAAHXZ
?copyFrom@CImageProcessor@@QEAAXPEAV1@@Z
?RankFilter@CImageProcessor@@QEAAXNH@Z

isafx60

?IsFileExist@CPublic@@SAHPEBD@Z
?DelayMs@CPublic@@SAXK@Z
?GetInt@CProfile@@QEAAHPEBD0H@Z
?GetString@CProfile@@QEAA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PEBD00@Z
?SetInt@CProfile@@QEAAXPEBD0H@Z
?SetString@CProfile@@QEAAXPEBD00@Z
??1CPublic@@UEAA@XZ
??1CRegistry@@UEAA@XZ
??0CExProfile@@QEAA@PEBD@Z
??0CProfile@@QEAA@PEBD@Z

mfc90

ord1919
ord2218
ord2722
ord589
ord316
ord3732
ord1516
ord888
ord4095
ord5647
ord798
ord5521
ord2533
ord1926
ord266
ord2380
ord265
ord310
ord4027
ord5609
ord300
ord2185
ord795
ord776
ord1103
ord1293
ord3774
ord577
ord3418
ord4363
ord4586
ord2907
ord5684
ord5333
ord5350
ord4677
ord4041
ord5346
ord5344
ord3002
ord1966
ord3923
ord5499
ord6348
ord5220
ord1023
ord3897
ord5701
ord2065
ord2110
ord4429
ord6407
ord3892
ord6409
ord4112
ord4136
ord771
ord2303
ord3921
ord583
ord1071
ord1938
ord1839
ord5302
ord4313
ord4846
ord5003
ord2067
ord1714
ord1713
ord3131
ord6038
ord1662
ord1659
ord4039
ord1433
ord4346
ord1954
ord5191
ord6406
ord4285
ord5323
ord3488
ord4833
ord4384
ord1636
ord6086
ord5355
ord5353
ord936
ord941
ord945
ord943
ord947
ord2455
ord2475
ord2459
ord2465
ord2463
ord2461
ord2478
ord2473
ord2457
ord2480
ord2468
ord2450
ord2452
ord2470
ord2233
ord2226
ord1556
ord6410
ord3893
ord6408
ord3430
ord5083
ord6012
ord3011
ord1393
ord5295
ord2010
ord1699
ord1698
ord1635
ord5320
ord2602
ord2797
ord2904
ord4410
ord2780
ord2932
ord2605
ord2711
ord2598
ord3809
ord3810
ord3800
ord2709
ord4042
ord4591
ord4364
ord3265
ord362
ord617
ord1585
ord5272
ord4689
ord6366
ord778
ord592
ord1239
ord320
ord1963
ord1205
ord1203
ord1229
ord1146
ord1195
ord379
ord1118
ord1238
ord1236
ord1111
ord1052
ord321
ord779
ord1060

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__CppXcptFilter
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
_decode_pointer
_onexit
_lock
__crt_debugger_hook
__dllonexit
_unlock
__C_specific_handler
?terminate@@YAXXZ
_purecall
malloc
floor
_CxxThrowException
memset
_encode_pointer
__clean_type_info_names_internal
memcpy
__CxxFrameHandler3

kernel32

GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalAlloc
GetModuleHandleA
LoadLibraryA
GetProcAddress
WriteFile
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
DeleteFileA
CreateDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetFileAttributesA
CloseHandle
GetFileSize
CreateFileA
LocalFree
ReadFile
TerminateProcess
GetCurrentThreadId

user32

SendMessageA
EnableWindow

ole32

CoInitialize

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z

Exports

Exports

??0CExProfile@@QEAA@AEBV0@@Z
??0CProfile@@QEAA@AEBV0@@Z
??0CPublic@@QEAA@AEBV0@@Z
??0CRegistry@@QEAA@AEBV0@@Z
??0CisBinManager@@QEAA@AEBV0@@Z
??0CisDrawable@@QEAA@AEBV0@@Z
??0CisInspection@@QEAA@AEBV0@@Z
??0CisInterface@@QEAA@AEBV0@@Z
??0CisLogger@@QEAA@AEBV0@@Z
??0CisLotInfo@@QEAA@AEBV0@@Z
??0CisTesterInfo@@QEAA@AEBV0@@Z
??1CExProfile@@QEAA@XZ
??1CProfile@@QEAA@XZ
??4CExProfile@@QEAAAEAV0@AEBV0@@Z
??4CImageProcessor@@QEAAXAEAV0@@Z
??4CImageProcessor@@QEAAXN@Z
??4CProfile@@QEAAAEAV0@AEBV0@@Z
??4CPublic@@QEAAAEAV0@AEBV0@@Z
??4CRegistry@@QEAAAEAV0@AEBV0@@Z
??4CisBinManager@@QEAAAEAV0@AEBV0@@Z
??4CisDrawable@@QEAAAEAV0@AEBV0@@Z
??4CisInterface@@QEAAAEAV0@AEBV0@@Z
??4CisLogger@@QEAAAEAV0@AEBV0@@Z
??4CisLotInfo@@QEAAAEAV0@AEBV0@@Z
??4CisTesterInfo@@QEAAAEAV0@AEBV0@@Z
??XCImageProcessor@@QEAAXAEAV0@@Z
??XCImageProcessor@@QEAAXN@Z
??YCImageProcessor@@QEAAXAEAV0@@Z
??YCImageProcessor@@QEAAXN@Z
??ZCImageProcessor@@QEAAXAEAV0@@Z
??ZCImageProcessor@@QEAAXN@Z
??_0CImageProcessor@@QEAAXAEAV0@@Z
??_0CImageProcessor@@QEAAXN@Z
??_4CImageProcessor@@QEAAXAEAV0@@Z
??_4CImageProcessor@@QEAAXN@Z
??_5CImageProcessor@@QEAAXAEAV0@@Z
??_5CImageProcessor@@QEAAXN@Z
??_6CImageProcessor@@QEAAXAEAV0@@Z
??_6CImageProcessor@@QEAAXN@Z
??_7CPublic@@6B@
??_7CRegistry@@6B@
??_7CisBinManager@@6B@
??_7CisDrawable@@6B@
??_7CisInspection@@6B@
??_7CisInterface@@6B@
??_7CisLogger@@6B@
??_7CisLotInfo@@6B@
??_7CisTesterInfo@@6B@
??_FCExProfile@@QEAAXXZ
??_FCProfile@@QEAAXXZ
?Add@CImageProcessor@@QEAAXH@Z
?Add@CImageProcessor@@QEAAXN@Z
?And@CImageProcessor@@QEAAXH@Z
?Average@CImageProcessor@@QEAANXZ
?Dilate@CImageProcessor@@QEAAXXZ
?Erode@CImageProcessor@@QEAAXXZ
?Fill@CImageProcessor@@QEAAXN@Z
?FindEdges@CImageProcessor@@QEAAXXZ
?Gamma@CImageProcessor@@QEAAXN@Z
?Invert@CImageProcessor@@QEAAXXZ
?Log@CImageProcessor@@QEAAXXZ
?Maximum@CImageProcessor@@QEAAXN@Z
?MeanRank@CImageProcessor@@QEAAXN@Z
?MedianFilter@CImageProcessor@@QEAAXXZ
?MedianRank@CImageProcessor@@QEAAXN@Z
?Minimum@CImageProcessor@@QEAAXN@Z
?Multiply@CImageProcessor@@QEAAXN@Z
?Or@CImageProcessor@@QEAAXH@Z
?Outline@CImageProcessor@@QEAAXXZ
?Smooth@CImageProcessor@@QEAAXXZ
?Sqr@CImageProcessor@@QEAAXXZ
?Sqrt@CImageProcessor@@QEAAXXZ
?StdDev@CImageProcessor@@QEAANXZ
?Subtract@CImageProcessor@@QEAAXH@Z
?Subtract@CImageProcessor@@QEAAXN@Z
?Sum@CImageProcessor@@QEAANXZ
?Xor@CImageProcessor@@QEAAXH@Z
?autoThreshold@CImageProcessor@@QEAAXXZ
?flipHorizontal@CImageProcessor@@UEAAXXZ
?getBitPerPixel@CImageProcessor@@QEAAHXZ
?getHeight@CImageProcessor@@QEAAHXZ
?getHistogramSize@CImageProcessor@@QEAAHXZ
?getPixels@CImageProcessor@@QEAAPEAXXZ
?getProcType@CImageProcessor@@QEAA?AW4IMAGE_PROCESSOR_TYPE@1@XZ
?getRoi@CImageProcessor@@QEAAAEAVCRect@@XZ
?getWidth@CImageProcessor@@QEAAHXZ
?setBinaryBackground@CImageProcessor@@UEAAXH@Z
?setBitPerPixel@CImageProcessor@@QEAAXH@Z
?setFilterEdgeType@CImageProcessor@@QEAAXH@Z
CreateInspection

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c85e85f257ea82a8c352ffbe4aa960c9

Headers

File Characteristics

Imports

isbase

imgproc

isafx60

mfc90

msvcr90

kernel32

user32

ole32

msvcp90

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB