1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe
Size

701KB
MD5

1ddba5cb3ebdc38fc3bfd81a816047b0
SHA1

382dab14cf19e65edcda20736a73812eac44fc8f
SHA256

a95278508ebeb724ee0a275e02dc5842892a2bb4d9f1ceb12ce98b1d1ea859ad
SHA512

00dd76ea1cb18255ed2d2002dcb80ea83c1daf2c6c1c6f88a18cd56e745658a1bb618bb8f200703883c5fdda917bd1928e1b12fdb3885503bc3121a6c50bc023
SSDEEP

12288:L3IOigqJXOy2EkbOdO4ly+Sb7mcH+Gz7fKuNz7hAPzbTDyOgYPorajWJ/giWxXLM:kOilJey2Ekb0laexuNJqb3yOgworajWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe

Files

1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_025C3BC8_9BFD_4548_81DB_B5F101631E7C
fn_03EBF78A_DC7B_4316_A9CC_2CE098406AAD
fn_04E654DD_C19B_4527_B43F_D6CCA660BC96
fn_052DA6CC_4DD1_48C3_B585_EE1E7439EA03
fn_0551F1CC_2052_40A9_9E79_F6F25CF03940
fn_0828830D_2B30_4C15_917F_36CC630908C3
fn_09812659_25E8_4F90_A16B_450C4F05A118
fn_09C98AC3_F4F1_40A0_BB16_BEB49BA1D48C
fn_0AD15760_B2F9_4AFA_ADE7_CD738A91B699
fn_0C51939C_E7D3_4799_BFB8_70BAC235B010
fn_0D440DA3_C5E2_4BEB_A0EA_5FDA9C572F04
fn_0E3F0C02_BE17_4923_B58D_B119E87640F5
fn_0E6CE821_EF04_4080_B66D_B2AF4AB03AB2
fn_0EE65A53_6DFA_486E_8755_50CBD93F0F0F
fn_0F3F8E4F_5BC5_4C78_9080_953116BF3531
fn_0F8F526E_206A_4F38_B06D_89B4D2094C93
fn_10AB1F18_62D8_4B57_AA42_E572FBFC34E2
fn_10ED251C_B9B6_4A13_B005_E22DA4B0571C
fn_11D56BF6_BAA5_4BFE_B361_186534C90F21
fn_1654FFA5_A45C_411D_B5B9_1C44ECCEC609
fn_16664853_EDCA_423E_99DB_00585214A13A
fn_16EAA466_4F67_451A_BC80_9458F64C1042
fn_1817E1C7_A0E8_4A23_B9F2_130B3B030B05
fn_18885035_5006_4A87_8F6A_4969ED1E3011
fn_195B4D3C_D2A8_4E48_8971_8E35FA371A52
fn_1C17EBF0_4F3C_4C69_B389_BC64EAF1DE3C
fn_1C21655F_C4DB_4CDA_A0E9_06A422FEDD18
fn_1D5FAD31_D596_4CF1_B789_4FE60FE05E21
fn_1DF6EEBA_B2EB_46CD_B3BB_C82AC55B13DC
fn_1F651EBA_E4A7_4BA8_9C22_A4FA7E9631FE
fn_20B61532_FB2F_4951_BDA0_D826F8433693
fn_21E6DC5F_B154_4300_8094_1BD13AF41D29
fn_240006E0_6372_4921_8405_86ACC216A0F2
fn_24A5016E_B905_438A_8166_C075DEC6D576
fn_25ECAD29_2CEB_4E64_9231_CD3E9502A8A7
fn_28457A1A_E67F_43F3_B5E4_83DFF2D9EBDF
fn_294204E2_6068_4D37_AB7A_368FD31F6B52
fn_2AD8D170_3164_4503_B4D5_6507BFA9778D
fn_2B29EC4E_E5C0_4876_80E5_2FB0511011B2
fn_2B2BB43F_4673_4977_8B38_98FA4E599070
fn_2C9CB9B6_BEAD_48E8_9162_D60D5E5E75F2
fn_2DC5A754_8038_4901_A2DC_8B33C8CBC86D
fn_2F578E94_2310_45A7_BCE4_137F052959F2
fn_2FA2D3EB_EE7F_4141_A72E_5768FF20579D
fn_2FFEE406_11B9_432F_9F9E_712FBD1FEED7
fn_317B358C_5695_43A6_B74B_CBD969A680B9
fn_34AEFA46_D275_42FB_8069_CAF2114E6FFC
fn_35F23E9E_C21E_4B2A_A022_469EFBD00E16
fn_36B99AF1_6F71_4EE0_AA87_6051022C8275
fn_36D6E24F_C28E_4430_9612_9A4A93C9306E
fn_37482220_9843_47E2_8DBC_F05614B9CADD
fn_39080BA2_2EF9_4D6D_8F3C_B2B348FBDE13
fn_3A7BCBD2_14CA_4E1C_9D27_ABD84CF9C3B1
fn_3AF59537_70FE_4A85_B7EA_0E0626D489B4
fn_3B9C2D96_FCCF_4F7E_B98B_1081C28D001A
fn_3D4D0001_6E19_4994_8EB0_229029D502F5
fn_3DB66AC1_89E2_4AAC_A796_8678950CDE43
fn_3DBCE0FA_CD55_42CE_B1F2_CEEECC61F003
fn_3DCDF907_D051_40D5_9C28_BF27C933EA5E
fn_3E190E5C_BD7A_45B8_B1E6_068D0D44A5B5
fn_3F703F03_294D_4F6A_AF8F_AB18C0DDD1FC
fn_42346887_0CB7_4742_8DCC_6D232B81586D
fn_43153C65_4959_45EE_BE60_22A4E5B1B14E
fn_4407EB10_A433_4229_AA2F_10980D07E9C1
fn_442EE562_75F4_4C5C_89A7_802997BD2D6E
fn_446F2783_E50E_49D9_A07B_FFFD9391E6CC
fn_44EF1DEB_8E20_431A_9118_3AA27EADB7BA
fn_4581E4B7_9882_48F6_8D74_D40196E8207C
fn_47DFF60A_E2D5_40B0_9B52_1258168070BD
fn_47E0CEFD_75C9_4FFC_980E_D3BF7DC621E5
fn_47E13B37_A13C_4E54_985E_A4513EA0C9C2
fn_47F530B4_2E89_45F9_A3A0_ABEFA0324EB4
fn_49B82A3A_E378_481A_AD6C_C0B55A1EB5EF
fn_49C4BDD8_A177_4D66_B7C9_56EFB06E3367
fn_4A122008_8B43_4364_A70A_3DA0E37DFB42
fn_4A415DA7_DAC0_4E08_BDC5_70A307BDF78B
fn_4AC1C217_10CE_401A_AED0_FD9A8655372E
fn_4AC3A053_6495_480B_96BC_4C27B07878A4
fn_4B1803C1_AF88_49CA_9CFC_5A2279F8BDE4
fn_4BA13DDE_CF26_4B01_A7AC_70B1850B2D10
fn_4CE9CDEB_F3FB_4F71_8333_DF5DA1CBD5D0
fn_4CF153CF_EB39_4D6D_BEAB_FD21754376B7
fn_4D70552B_2799_4DEB_BC3F_C34410E52BE1
fn_4EC52C44_655B_46C6_8831_C4595FB0076B
fn_4F47F22B_DE71_4364_9CAA_5950B734C9E8
fn_4F995FDD_DBE7_43C5_ADA3_000A6AA2C761
fn_50DF69B6_8CAA_42A4_A179_D3077D5CF61F
fn_52A1596A_68D1_4D14_BF7C_16603AD0EB1E
fn_52CDC167_DF2E_4E72_804C_E29D8430960B
fn_544E1B2C_EB09_4074_8089_A0070D318A2B
fn_5565ABF9_B021_4031_9E5E_65DF8844A144
fn_5621CD21_C779_4FDC_ACD4_FA0C9992B345
fn_563F5147_D9F9_4616_BE64_07EFE8D0221D
fn_570737DC_C030_4641_B906_3A6779224BCD
fn_571F099F_CC55_48FD_8A7E_58F2D9B23D1C
fn_5844C822_78EC_4512_AB04_435DF3E724CD
fn_59DE712A_29FA_43C6_B514_49CFBE9E0329
fn_5CB98455_A483_4B68_A302_3FC71AE6EE0F
fn_5CB9DDED_AE23_4C90_ABF6_941EC0EA43E8
fn_5DA5546E_1CFB_4240_A7DC_3BB44D1CDF32
fn_5DB32860_D4B2_4CB4_9D77_BBEC49327BB9
fn_5EC01354_C49A_4757_91A3_E0BDF2EE85AB
fn_5FDFF645_F0EB_4EBC_A8D5_4297EEEF068A
fn_60BCBC1B_816F_45B7_B2E4_A74A0CAD2DDE
fn_615F6B8F_4C14_487D_8B7F_BA609BCD9AAF
fn_619D98E7_72BF_405A_80D4_412A634209B8
fn_6253A34C_7AF6_4C43_82D6_44F11C146536
fn_635CC2EB_14B1_42AE_B1FA_D500DE90AE75
fn_6462322B_33C4_42D9_8BEC_B9FD700C3C0D
fn_6474A19F_0D82_4284_85E5_4B82D62FE506
fn_64AF4D3F_2684_40AB_A8F6_6FE17A144F0D
fn_65008FEA_4412_4009_A895_036B3FD40C92
fn_6565D841_E3D1_4F1C_980F_015F38EF8290
fn_6A2FCBDB_AD3C_4834_8B64_15A1C6EB2365
fn_6B1EE7D1_EFB7_4001_A12E_6AE8D8170A7B
fn_6D00CFDE_4A40_4C51_BAFD_A073E073DE9C
fn_6E01B784_D3F2_4FE9_8B6E_72D784B36883
fn_72793EED_5EFB_4341_85B3_E82447803649
fn_74BA143C_4C46_411F_BFEF_50B2C92A5D44
fn_76A3F2F9_950E_417F_A985_C8C43227ACBE
fn_76D309DD_94F2_456E_808D_40DD8438A238
fn_77112FE1_EE59_45EB_87A7_1C674F425EC2
fn_77B7F1EE_2CC0_4F10_A345_A1B861DC5E89
fn_786D559A_0413_438B_A4E9_FC626A8C4DFE
fn_79057E48_FDDA_4B14_999D_22E7924D3C2D
fn_7A4CE38B_CE8F_4E71_8DC0_BDAD73FAD494
fn_7A926F9A_2612_4ECC_B12C_0FAED6FA16CE
fn_7B084D6E_D4F7_4F74_BBDC_E0BC2F2753DA
fn_7CED4BC7_8BF6_4076_B48C_B2224FFFCDB1
fn_7E67526F_39DB_45C8_BA88_646D7C09C649
fn_7E7D610D_6EC7_4689_8BF4_98637FD25789
fn_7EA50B5D_72B3_42F5_8900_79C82E21453F
fn_7F602A49_4795_4FEA_89B2_589876148241
fn_818ECE4E_9436_44CF_8DBB_2DBE8F7C1A4F
fn_82070D89_3E43_459F_9D01_C3A8620FEA21
fn_8247A4A8_D7F3_4681_86A5_BAB24982876D
fn_8378957F_7EE0_473B_A859_536186CF274D
fn_86C78F9D_7B02_4195_B12D_752770FC60F7
fn_8A40CD53_4300_48EC_B365_F568FCDB6550
fn_8B99DADD_C333_4433_B4C8_BDE80DD457C4
fn_8C686FA8_CA8E_4B81_8D8C_383B6098E3C4
fn_8CB85993_0C9B_41D3_A180_C2439AE0F610
fn_8D925EF0_05A0_4991_BA74_23A372C06202
fn_8F88CE30_F14A_483C_9646_C2B34AE5CA0C
fn_8FA92FE6_4B36_4885_B9AD_82BBEE41A513
fn_8FCB0529_FD53_4546_9144_66D079B9ED9D
fn_90977EDE_A6A5_4216_B411_15A732CFA7F1
fn_90F06DBE_3A38_46CC_B079_796297F38C47
fn_922E8B3C_B9F5_4DEB_A49E_B32EA029A317
fn_933A3046_6C5A_4544_B91E_0A65FB79E226
fn_95215EAA_C822_46F8_BFAF_494A0CB64DAA
fn_95E808D9_6B27_42A9_A71D_DD937BCCC6D3
fn_9742CF8E_6EFB_47B7_9249_046236A3901C
fn_9775EE83_2678_487F_B331_4C33090C8147
fn_9A51C876_C6BF_428C_A603_DFBC4EE46E38
fn_9D1151E2_E6E4_4C08_8E20_DA438CDAA423
fn_9E2843D4_EBBF_436E_A0D4_97DC551B9B7D
fn_9EA8425B_79CC_406A_9842_CAC4AFA43ECB
fn_9ED2DB6C_42B7_45AF_9350_6745C8CD023D
fn_9F828827_9FF6_4361_94F8_5F17A4A74109
fn_A07DADBE_EF70_4945_A339_96B063356771
fn_A1C4078E_0DE7_46CC_90AD_D73752FF3D6E
fn_A2A67B58_82EE_4E6C_B95F_1170234A8F30
fn_A36CBBE8_1254_4B30_B429_2D7B47AFDF0C
fn_A375AD31_6C35_4D34_B234_CC7F6BD87FFF
fn_A3D46F28_DEDD_4B8F_AF11_BB7CA3E7BAB7
fn_A4607170_32AB_4DB5_9F74_B7C3F663959B
fn_A53D128B_486A_4A81_8693_CB21FFC2E1DC
fn_A55A9E6D_5870_495B_A574_E4EDD479100A
fn_A745D217_7F79_4A62_8BBF_78016FD39B72
fn_A7561A8F_831A_4A07_AF07_98189C5B1867
fn_A768A5D0_8ED2_40C8_961D_B4695AB77529
fn_A84E8366_27DE_41F1_8F00_F399B3D4C9CC
fn_A94CDA30_0C06_4DDA_901D_81CB12A3016C
fn_A9DF2447_F800_4023_B1A3_DA07502D2DAA
fn_AEDDB223_9D28_4661_9D70_B33FC697DFF5
fn_B02E6EA2_3854_4FDC_86E5_0238277039C6
fn_B045E465_4908_420A_9559_076C87FF411B
fn_B08020B3_D5CF_4B9B_A2EE_6924A676EC49
fn_B0D0DDED_DF00_4C9E_A8E3_C123A850DB03
fn_B1BBD1C4_21BB_4676_8338_2AD90CA4507C
fn_B39F6F34_686F_4D16_B622_FD56983321EA
fn_B40653DF_75E4_477E_8A67_5A9B2B720B0A
fn_B46A3169_A975_4686_9BAC_C806CD26AE11
fn_B5678C54_0340_4416_8651_E5DFEC5951F9
fn_B5B3FB81_F812_4DAF_9328_0BFF10F128C8
fn_B5CE87AC_B08E_440B_9897_492AE652F24C
fn_B653C6DD_27AF_4EAB_947F_6BE674929881
fn_B83680BF_1EE6_490D_AB4D_49805BFB85A5
fn_B956B5FA_CD2E_4B47_B389_9210403AF033
fn_BA0BAE02_E38B_4ED0_87AF_286F328BBDBE
fn_BAD6EC34_D0CA_49E8_B2DB_3C92B211EEA6
fn_BBED7213_B6C5_4D83_83AF_8E33728936E8
fn_BC69D20A_DBD8_4AFC_96AA_A0911BD8C8F2
fn_BCC27CC6_77D7_4BC3_AAD1_AB312D4CFE4C
fn_BCED5184_9CAA_4BA1_B220_F1CBC919AB3E
fn_BD19EE67_A92B_4CFB_9292_23A61FDF003F
fn_BECF3AB3_8D92_4062_8F9A_05C9925B2A88
fn_BF5E4F74_4950_4FA7_A728_D115B67674AF
fn_C00A0D12_2F04_4D00_A665_2DB44C75DD0B
fn_C04452F9_B131_46D9_ACAD_339E0DEEDE50
fn_C0A3A0A0_7DFA_4BAC_9BD7_3B0EB637592C
fn_C17AFF95_5EB3_49F9_8F5C_F504DFDEA0D7
fn_C1A9B4D5_9EA4_457F_88FD_C01AF51F6A44
fn_C2AD1D3D_530C_401B_BAEA_96D69B0A6B6C
fn_C2F8EA9D_845D_4FC8_A947_EB09B2927898
fn_C44828B3_BA74_4F9B_A67D_6987CE820449
fn_C47109C3_C940_4671_B354_27D82464B4D4
fn_C4C5BD16_4728_422B_A6DF_916D6FF5269B
fn_C6883601_E030_4F18_B2D7_4419821567DF
fn_C882B8CA_589C_4D10_9D2C_1DD96AFE21D2
fn_CADC5491_0F0E_47FF_8998_DE22EEA05BF5
fn_CB61957B_0AEB_4585_A269_179139273ACC
fn_CBD6884C_7685_4394_AB04_A2D0A0D0462F
fn_CFAC0BCD_5C79_4EC9_9452_BA41ED41DF4A
fn_D1D137F3_DFC3_4B7D_A88B_A52D466FB11D
fn_D281E971_79B3_4019_9469_F0218FFF3974
fn_D46930C0_22D6_42A2_82F0_CB00FB8759B7
fn_D538A98F_925E_44E9_BEA0_139C64EB5C6D
fn_D631E8D5_FC6F_4C95_9FAF_00880C08D2C1
fn_D6729D39_58B0_42B9_9663_3C9CEEFE702E
fn_D6C4FA7E_06D6_40CA_895C_A84C3B63AB64
fn_D7900F3C_3F4A_44DC_A2B0_0247C7E285F3
fn_DAFFCDE2_D1E3_466B_938D_FF4FC4A89512
fn_DB0EA0A9_35B2_4B53_B4D4_0135E5785248
fn_DD50D908_DC34_4F58_A177_27179D268D5E
fn_DD7BF78A_C7F3_49E1_B106_62B40CFB9953
fn_DE5B579E_2FA4_43EB_ABE4_4398AD35A2C3
fn_E0DB7563_9F8F_437B_B9E4_81DA8A907A2A
fn_E0F84709_3FBD_40F7_B0A5_FD77E73B1BE3
fn_E1BDD467_05BE_451F_80B2_D3C6B03411AA
fn_E378B15F_6C4F_4645_A01F_62D329DA6A79
fn_E3BF5C0C_0915_4D2A_915E_29EB0EEA717A
fn_E566C21C_5C40_4B18_8893_6CC0BBF7DE58
fn_E63BE736_F22E_42D9_983F_8357FF974456
fn_EAC00EB0_EC06_4230_8451_73E90FF37961
fn_EB076123_45B0_48CF_890E_AD2FA1681B41
fn_EBEA764B_C008_4EB7_B2F3_9C9FE3EC7609
fn_EC12DB83_45CE_452E_B2F7_C6F9A7522440
fn_EC3D6AA0_38AC_4C1A_80AC_801214D73BD4
fn_EEAB020C_5D0D_4870_A9A7_15C5F873E136
fn_F0018EA9_4936_4384_9EDB_B2F66380A6F7
fn_F137B62A_8DCA_4189_A4D5_C90456204BE8
fn_F177EE22_7C76_4B31_9E42_719EE104AB87
fn_F2626191_4335_4A80_9777_5A9A831B5F9B
fn_F34B3A15_3C21_4282_A259_10F170B00EF7
fn_F7417DF6_AECD_4BD0_8447_B00941A01430
fn_FB324A12_12C8_4096_ACB9_E341A12C2A15
fn_FBDBF45A_34BD_4841_8102_1AF9559BAC06
fn_FC9632CD_2A13_4619_9E58_681E7CB5A864
fn_FCF0A38C_1892_423E_A1F3_FD31D36E79B1
fn_FE195EB6_16A7_46BD_8639_29B9FB3BA666
fn_FE75ABEE_27CD_44BF_91EC_EF25E0D1D06A

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB