1265573b9c1a9bbe78d899a663bc2a90_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1265573b9c1a9bbe78d899a663bc2a90_NeikiAnalytics.exe
Size

1.0MB
MD5

1265573b9c1a9bbe78d899a663bc2a90
SHA1

db6f0468482e8f958fb5f021a437b9739886bfa9
SHA256

84e4f63b55b8f3db5793a4e56568d65525c3b3a930721fceaf62e77b183a8ed5
SHA512

0c5f9f3a3df5e658af87a56a6dda79265ed0b6e3a921c4772de8f8725b2c182d68be900aaf35af9758cb7a65c80f28d9bed80bcbe933c9ca4fadfbcd11d4066c
SSDEEP

24576:+wd4FTbvancj4vHyji1npalJwv9ei+tDnE5G55QbFAco28vmJwe9BehScqg63:+7FTbacj4vHyan44v9ei+tDnE5G55Qbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1265573b9c1a9bbe78d899a663bc2a90_NeikiAnalytics.exe

Files

1265573b9c1a9bbe78d899a663bc2a90_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

5e514194ff935302e7f8b4b1cda64f63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetTickCount
GetSystemDirectoryW
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
HeapFree
GetCPInfo
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetProcessHeap
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

winsta

WinStationVirtualOpenEx

vcruntime140

memset
wcsrchr

api-ms-win-core-processthreads-l1-1-0

SwitchToThread
SetThreadPriorityBoost

crypt32

CertGetNameStringW

ssdpapi

SsdpStartup

powrprof

WriteProcessorPwrScheme
PowerCreateSetting

sqmapi

SqmAddToStreamString

localspl

SplIsLocalDriverAvailable
SplEndDocPrinter

msnetobj

DllGetClassObject

api-ms-win-core-misc-l1-1-0

lstrlenW
Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

imagehlp

SymGetSymFromAddr

msdart

MPDeleteCriticalSection

ntdll

NtFreeVirtualMemory

xmllite

CreateXmlReader

oledlg

OleUIInsertObjectA
OleUIChangeSourceA
OleUIUpdateLinksA

mpr

WNetGetConnectionA

user32

AllowForegroundActivation

dplayx

DllUnregisterServer
DllCanUnloadNow

shell32

SHCreateDirectoryExW
CommandLineToArgvW
SHSetKnownFolderPath

mscoree

StrongNameKeyInstall

dwmapi

DwmIsCompositionEnabled

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

psapi

QueryWorkingSet

cryptui

CryptUIDlgViewSignerInfoW

api-ms-win-core-util-l1-1-0

DecodePointer

wkscli

NetWkstaGetInfo

dui70

EnableAnimations

mf

MFCreateTranscodeTopology

api-ms-win-core-synch-l1-2-0

Sleep

ws2_32

WSAJoinLeaf

slc

SLGetWindowsInformationDWORD

dhcpcsvc

DhcpRequestParams

msls31

LssbGetNumberDnodesInSubline

lpk

LpkUseGDIWidthCache

api-ms-win-core-libraryloader-l1-1-0

SizeofResource

api-ms-win-core-handle-l1-1-0

CloseHandle

netman

HrLanConnectionNameFromGuidOrPath

api-ms-win-core-sysinfo-l1-1-0

GetLogicalProcessorInformationEx

atmlib

ATMFontStatusA

w32topl

ToplScheduleCacheDestroy

netutils

NetpwNameValidate

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

scecli

SceGenerateRollback

clusapi

ClusterRegCloseKey

msvcr120

fgetwc

mprapi

MprAdminInterfaceEnum

pdh

PdhGetLogFileTypeA

rtutils

RouterLogDeregisterA

urlmon

HlinkNavigateString

opengl32

glGetMapiv

lz32

LZCopy

syssetup

AsrAddSifEntryW

devobj

DevObjCreateDeviceInfoList

odbc32

SQLSetConnectAttr

msvcrt

isleadbyte

api-ms-win-core-localregistry-l1-1-0

RegQueryInfoKeyW

api-ms-win-core-threadpool-l1-1-0

DeleteTimerQueueEx

snmpapi

SnmpUtilOctetsCmp

glu32

gluTessEndPolygon

traffic

TcCloseInterface

comctl32

InitMUILanguage

usp10

ScriptGetLogicalWidths

wiaservc

wiasReadMultiple

dbghelp

ImageRvaToSection

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e514194ff935302e7f8b4b1cda64f63

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winsta

vcruntime140

api-ms-win-core-processthreads-l1-1-0

crypt32

ssdpapi

powrprof

sqmapi

localspl

msnetobj

api-ms-win-core-misc-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

imagehlp

msdart

ntdll

xmllite

oledlg

mpr

user32

dplayx

shell32

mscoree

dwmapi

api-ms-win-crt-convert-l1-1-0

api-ms-win-eventing-provider-l1-1-0

psapi

cryptui

api-ms-win-core-util-l1-1-0

wkscli

dui70

mf

api-ms-win-core-synch-l1-2-0

ws2_32

slc

dhcpcsvc

msls31

lpk

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-handle-l1-1-0

netman

api-ms-win-core-sysinfo-l1-1-0

atmlib

w32topl

netutils

api-ms-win-security-sddl-l1-1-0

scecli

clusapi

msvcr120

mprapi

pdh

rtutils

urlmon

opengl32

lz32

syssetup

devobj

odbc32

msvcrt

api-ms-win-core-localregistry-l1-1-0

api-ms-win-core-threadpool-l1-1-0

snmpapi

glu32

traffic

comctl32

usp10

wiaservc

dbghelp

Sections

.text Size: 136KB - Virtual size: 135KB

.rdata Size: 82KB - Virtual size: 81KB

.text
Size: 136KB - Virtual size: 135KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 152KB - Virtual size: 169KB

BSS
Size: 222KB - Virtual size: 221KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 7KB - Virtual size: 7KB

.l1
Size: 2KB - Virtual size: 2KB

.l1
Size: 2KB - Virtual size: 2KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 5KB - Virtual size: 5KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 6KB - Virtual size: 6KB

.l1
Size: 7KB - Virtual size: 7KB

.l1
Size: 7KB - Virtual size: 7KB

.l1
Size: 7KB - Virtual size: 7KB

.l1
Size: 7KB - Virtual size: 7KB

.l1
Size: 7KB - Virtual size: 7KB

.l1
Size: 7KB - Virtual size: 7KB

.l1
Size: 7KB - Virtual size: 7KB