bdb6af673d4794b88f4bb9055893ec20_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

bdb6af673d4794b88f4bb9055893ec20_NeikiAnalytics.exe
Size

2.8MB
MD5

bdb6af673d4794b88f4bb9055893ec20
SHA1

6409f4068d8b2b25344e0b1057d50656753aee7a
SHA256

739af1fb186eb044fabb990bf9031ed556b4d33111234d89c729049dfab8c641
SHA512

78a529ce4d10b5fd7b9d91fcd9323c4fe719484004c0eaa5b4fb5345dcddda8634a8b0eb7ba8e8c040c0e102dbb4d4f57d86d646bfd7e8fdaf5cad5085192f73
SSDEEP

49152:i+oio79t3Aw5QOohOaxhWorXe9wUWvOQv0cEwVgmQcdRo:WioJotkco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdb6af673d4794b88f4bb9055893ec20_NeikiAnalytics.exe

Files

bdb6af673d4794b88f4bb9055893ec20_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

b2e16bd5369937daaca1488e4b72f087

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dxgi

CreateDXGIFactory1
DXGID3D10CreateDevice
DXGID3D10RegisterLayers

kernel32

DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryA
RaiseException

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_assert
_strdup
_stricmp
calloc
free
fwrite
getenv
memcmp
memcpy
memmove
memset
realloc
strchr
strcmp
strcspn
strlen

wined3d

wined3d_mutex_lock
wined3d_mutex_unlock
wined3d_check_device_format
wined3d_check_device_multisample_type
wined3d_get_adapter
wined3d_blend_state_create
wined3d_blend_state_decref
wined3d_blend_state_get_parent
wined3d_blend_state_incref
wined3d_buffer_create
wined3d_buffer_decref
wined3d_buffer_get_parent
wined3d_buffer_get_resource
wined3d_buffer_incref
wined3d_command_list_decref
wined3d_deferred_context_create
wined3d_deferred_context_destroy
wined3d_deferred_context_record_command_list
wined3d_depth_stencil_state_create
wined3d_depth_stencil_state_decref
wined3d_depth_stencil_state_get_parent
wined3d_depth_stencil_state_incref
wined3d_device_decref
wined3d_device_get_creation_parameters
wined3d_device_get_device_caps
wined3d_device_get_immediate_context
wined3d_device_get_state
wined3d_device_get_wined3d
wined3d_device_incref
wined3d_device_context_clear_rendertarget_view
wined3d_device_context_clear_uav_float
wined3d_device_context_clear_uav_uint
wined3d_device_context_copy_resource
wined3d_device_context_copy_sub_resource_region
wined3d_device_context_copy_uav_counter
wined3d_device_context_dispatch
wined3d_device_context_dispatch_indirect
wined3d_device_context_draw
wined3d_device_context_draw_indexed
wined3d_device_context_draw_indirect
wined3d_device_context_execute_command_list
wined3d_device_context_flush
wined3d_device_context_generate_mipmaps
wined3d_device_context_get_blend_state
wined3d_device_context_get_constant_buffer
wined3d_device_context_get_depth_stencil_state
wined3d_device_context_get_depth_stencil_view
wined3d_device_context_get_index_buffer
wined3d_device_context_get_predication
wined3d_device_context_get_primitive_type
wined3d_device_context_get_rasterizer_state
wined3d_device_context_get_rendertarget_view
wined3d_device_context_get_sampler
wined3d_device_context_get_scissor_rects
wined3d_device_context_get_shader
wined3d_device_context_get_shader_resource_view
wined3d_device_context_get_stream_output
wined3d_device_context_get_stream_source
wined3d_device_context_get_unordered_access_view
wined3d_device_context_get_vertex_declaration
wined3d_device_context_get_viewports
wined3d_device_context_issue_query
wined3d_device_context_map
wined3d_device_context_reset_state
wined3d_device_context_resolve_sub_resource
wined3d_device_context_set_blend_state
wined3d_device_context_set_constant_buffers
wined3d_device_context_set_depth_stencil_state
wined3d_device_context_set_index_buffer
wined3d_device_context_set_predication
wined3d_device_context_set_primitive_type
wined3d_device_context_set_rasterizer_state
wined3d_device_context_set_render_targets_and_unordered_access_views
wined3d_device_context_set_samplers
wined3d_device_context_set_scissor_rects
wined3d_device_context_set_shader
wined3d_device_context_set_shader_resource_views
wined3d_device_context_set_state
wined3d_device_context_set_stream_outputs
wined3d_device_context_set_stream_sources
wined3d_device_context_set_unordered_access_views
wined3d_device_context_set_vertex_declaration
wined3d_device_context_set_viewports
wined3d_device_context_unmap
wined3d_device_context_update_sub_resource
wined3d_query_create
wined3d_query_decref
wined3d_query_get_data
wined3d_query_get_data_size
wined3d_query_get_parent
wined3d_query_incref
wined3d_query_issue
wined3d_rasterizer_state_create
wined3d_rasterizer_state_decref
wined3d_rasterizer_state_get_parent
wined3d_rasterizer_state_incref
wined3d_rendertarget_view_create
wined3d_rendertarget_view_decref
wined3d_rendertarget_view_get_parent
wined3d_rendertarget_view_incref
wined3d_resource_get_desc
wined3d_resource_map
wined3d_resource_set_parent
wined3d_resource_unmap
wined3d_sampler_create
wined3d_sampler_decref
wined3d_sampler_get_parent
wined3d_sampler_incref
wined3d_shader_create_cs
wined3d_shader_create_ds
wined3d_shader_create_gs
wined3d_shader_create_hs
wined3d_shader_create_ps
wined3d_shader_create_vs
wined3d_shader_decref
wined3d_shader_get_parent
wined3d_shader_incref
wined3d_shader_resource_view_create
wined3d_shader_resource_view_decref
wined3d_shader_resource_view_get_parent
wined3d_shader_resource_view_incref
wined3d_state_create
wined3d_state_destroy
wined3d_state_get_feature_level
wined3d_swapchain_decref
wined3d_swapchain_incref
wined3d_texture_create
wined3d_texture_decref
wined3d_texture_get_resource
wined3d_texture_get_swapchain
wined3d_texture_incref
wined3d_unordered_access_view_create
wined3d_unordered_access_view_decref
wined3d_unordered_access_view_get_parent
wined3d_unordered_access_view_incref
wined3d_vertex_declaration_create
wined3d_vertex_declaration_decref
wined3d_vertex_declaration_get_parent
wined3d_vertex_declaration_incref
vkd3d_shader_free_shader_signature
vkd3d_shader_parse_input_signature

Exports

Exports

D3D11CoreCreateDevice
D3D11CoreCreateLayeredDevice
D3D11CoreGetLayeredDeviceSize
D3D11CoreRegisterLayers
D3D11CreateDevice
D3D11CreateDeviceAndSwapChain
D3D11On12CreateDevice
D3DKMTCheckVidPnExclusiveOwnership
D3DKMTCloseAdapter
D3DKMTCreateAllocation
D3DKMTCreateContext
D3DKMTCreateDevice
D3DKMTCreateSynchronizationObject
D3DKMTDestroyAllocation
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTLock
D3DKMTOpenAdapterFromGdiDisplayName
D3DKMTOpenAdapterFromHdc
D3DKMTOpenResource
D3DKMTPresent
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryResourceInfo
D3DKMTRender
D3DKMTSetAllocationPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetVidPnSourceOwner
D3DKMTSignalSynchronizationObject
D3DKMTUnlock
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForVerticalBlankEvent
OpenAdapter10
OpenAdapter10_2

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2e16bd5369937daaca1488e4b72f087

Headers

DLL Characteristics

File Characteristics

Imports

dxgi

kernel32

ntdll

ucrtbase

wined3d

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 202KB

.data Size: 4KB - Virtual size: 224B

.rodata Size: 4KB - Virtual size: 1KB

.rdata Size: 104KB - Virtual size: 103KB

/4 Size: 4KB - Virtual size: 824B

.bss Size: - Virtual size: 192B

.edata Size: 4KB - Virtual size: 1KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 16KB - Virtual size: 14KB

/14 Size: 4KB - Virtual size: 504B

/29 Size: 1.6MB - Virtual size: 1.6MB

/41 Size: 24KB - Virtual size: 22KB

/55 Size: 156KB - Virtual size: 152KB

/67 Size: 40KB - Virtual size: 39KB

/80 Size: 116KB - Virtual size: 115KB

/91 Size: 208KB - Virtual size: 205KB

/102 Size: 40KB - Virtual size: 37KB

.text
Size: 204KB - Virtual size: 202KB

.data
Size: 4KB - Virtual size: 224B

.rodata
Size: 4KB - Virtual size: 1KB

.rdata
Size: 104KB - Virtual size: 103KB

/4
Size: 4KB - Virtual size: 824B

.bss
Size: - Virtual size: 192B

.edata
Size: 4KB - Virtual size: 1KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 16KB - Virtual size: 14KB

/14
Size: 4KB - Virtual size: 504B

/29
Size: 1.6MB - Virtual size: 1.6MB

/41
Size: 24KB - Virtual size: 22KB

/55
Size: 156KB - Virtual size: 152KB

/67
Size: 40KB - Virtual size: 39KB

/80
Size: 116KB - Virtual size: 115KB

/91
Size: 208KB - Virtual size: 205KB

/102
Size: 40KB - Virtual size: 37KB