9a1577c810619ee75862fad3a5a2a390_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

9a1577c810619ee75862fad3a5a2a390_NeikiAnalytics.exe
Size

1.3MB
MD5

9a1577c810619ee75862fad3a5a2a390
SHA1

2375c300913951f585d8b24ba7d4a576af20621b
SHA256

9caf1f3e3c80103764314bdf8ce11fd212cba089ff65f674f85d1b4d30af87a1
SHA512

efccbf61543bacf1f0eaec531d7e0c25f04272be8e819148a6156d258e33d284b8f1d83a8ed97a1d261d4c83bbff221350d09023708f5c97fc60ffd213244dae
SSDEEP

24576:fDNe/x8T0h9sNjzjcmHNAvFV83wCZmdav:fDNy8T0h9wvNybCZmcv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a1577c810619ee75862fad3a5a2a390_NeikiAnalytics.exe

Files

9a1577c810619ee75862fad3a5a2a390_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

ffbecae19dab1704d1cecc7f663ce886

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\배승호\Documents\Visual Studio 2010\Projects\GameProject\Debug\GameProject.pdb

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

dsound

ord11

dinput8

DirectInput8Create

d3d9

Direct3DCreate9

kernel32

OutputDebugStringA
Sleep
InterlockedCompareExchange
GetCurrentThreadId
SetThreadPriority
CloseHandle
WaitForSingleObject
GetModuleHandleA
CreateSemaphoreA
ReleaseSemaphore
CreateEventA
SetEvent
ResetEvent
LCMapStringW
GetLocaleInfoW
GetUserDefaultLCID
VirtualFree
IsValidLocale
GetLocaleInfoA
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapDestroy
HeapCreate
HeapQueryInformation
HeapSize
HeapReAlloc
GetModuleFileNameA
SetConsoleCtrlHandler
OutputDebugStringW
VirtualAlloc
InterlockedExchange
SetStdHandle
CreateFileA
CreateFileW
SetEndOfFile
EnumSystemLocalesA
DecodePointer
WriteConsoleW
FlushFileBuffers
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
RtlUnwind
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
RaiseException
lstrlenA
GetProcAddress
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
GetModuleFileNameW
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InterlockedDecrement
InterlockedIncrement
GetLastError
CreateThread
ExitThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
ExitProcess
FatalAppExitA
WriteFile

user32

SetWindowLongA
SetWindowPos
RegisterClassExA
GetCursorPos
ScreenToClient
GetKeyboardState
GetAsyncKeyState
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
GetWindowRect
AdjustWindowRect
LoadAcceleratorsA
PeekMessageA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyWindow
MessageBoxA

gdi32

CreateFontA
CreateCompatibleDC
DeleteObject
GetGlyphOutlineA
SelectObject
GetTextMetricsA
DeleteDC

shell32

DragQueryFileA
DragAcceptFiles

ole32

CoInitializeEx
CoUninitialize

Sections

.textbss
Size: - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 991KB - Virtual size: 990KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffbecae19dab1704d1cecc7f663ce886

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

dsound

dinput8

d3d9

kernel32

user32

gdi32

shell32

ole32

Sections

.textbss Size: - Virtual size: 470KB

.text Size: 991KB - Virtual size: 990KB

.rdata Size: 274KB - Virtual size: 273KB

.data Size: 13KB - Virtual size: 330KB

.idata Size: 5KB - Virtual size: 5KB

.reloc Size: 35KB - Virtual size: 34KB

.textbss
Size: - Virtual size: 470KB

.text
Size: 991KB - Virtual size: 990KB

.rdata
Size: 274KB - Virtual size: 273KB

.data
Size: 13KB - Virtual size: 330KB

.idata
Size: 5KB - Virtual size: 5KB

.reloc
Size: 35KB - Virtual size: 34KB