5b5de504f2abc06a4ee0cf1237f85140_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5b5de504f2abc06a4ee0cf1237f85140_NeikiAnalytics.exe
Size

1.1MB
MD5

5b5de504f2abc06a4ee0cf1237f85140
SHA1

a3d75647167d369bf4a8ddb68b819c042919b168
SHA256

faca9fd21b087b6ae9067df3df0b5d57d20d4ae187f7e996df968dc2a899e917
SHA512

72a1416031e6c0a1e38f2e2a87cbad58a6b90ed84463778c0b8c0c2fff6259e634776b669c6f150fbd96b3f14beb8c135ee21fdafeb38c335be72df87c946985
SSDEEP

24576:FIIIGnOmYtxbXbbpG3EXq6MS/uv2bknMhTDYh+tz4+Iwr:FxnOf1vpG3EXq6t/Xo8S4z4+Iw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5de504f2abc06a4ee0cf1237f85140_NeikiAnalytics.exe

Files

5b5de504f2abc06a4ee0cf1237f85140_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

5128576cde4d5144e2721d480fb6c2a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\PACS\XePacs\Bin\Release\XeImageCtrls.pdb

Imports

xeimageloader

CreateImageObject

xetools

GenInstanceUID
??0CResAutoMana@@QAE@PAUHINSTANCE__@@@Z
??1CResAutoMana@@QAE@XZ
_TRACE_STRING
_TRACE_STRING2
CalcFitRect
GetAppPath
MonitorRectFromRect
GetDeviceBitsPerPixel

xeui

??1CMyFlatButton@@UAE@XZ
??1CMySliderCtrl1@@UAE@XZ
?ResetSlider@CMyScrollBar@@IAEXXZ
??0CMyFlatButton@@QAE@XZ
??0CMyEdit@@QAE@XZ
??0CMySliderCtrl1@@QAE@XZ
GetXeUIColor
?SetIcon@CMyButton@@QAEXPAUHICON__@@@Z
?SetButtonTip@CMyButton@@QAEXPBD@Z
FillDialog
??1CMySliderCtrl@@UAE@XZ
??1CMyCheckButton@@UAE@XZ
??0CMyCheckButton@@QAE@XZ
??0CMySliderCtrl@@QAE@XZ
?SetPushDown@CMyButton@@QAEXH@Z
??1CMyScrollBar@@UAE@XZ
??1CProgressDlg@@UAE@XZ
??0CMyScrollBar@@QAE@XZ
DrawBorderNormal
?SetBkColor@CMyFlatButton@@QAEXK@Z
?Create@CMyScrollBar@@QAEHABUtagRECT@@PAVCWnd@@I@Z
??1CTableSelector@@UAE@XZ
??0CTableSelector@@QAE@XZ
?Popup@CTableSelector@@QAE?AVCSize@@PAUHWND__@@VCRect@@@Z
?SetPos@CMyScrollBar@@QAEHH@Z
??0CProgressDlg@@QAE@PAD@Z
?Create@CProgressDlg@@QAEHPAVCWnd@@@Z
?SetRange@CProgressDlg@@QAEXHH@Z
?SetStep@CProgressDlg@@QAEHH@Z
?CheckCancelButton@CProgressDlg@@QAEHXZ
?StepIt@CProgressDlg@@QAEHXZ
??1CMyEdit@@UAE@XZ

mfc100

ord5830
ord2406
ord3695
ord3429
ord2050
ord1948
ord408
ord12128
ord1251
ord6083
ord2828
ord2935
ord265
ord266
ord1929
ord12962
ord7474
ord3970
ord11067
ord8137
ord10007
ord10360
ord3620
ord2974
ord2973
ord2752
ord5532
ord12531
ord2416
ord8235
ord8305
ord5803
ord1294
ord8465
ord9445
ord4782
ord2187
ord3475
ord5875
ord3746
ord7863
ord11107
ord6970
ord8554
ord3390
ord12868
ord11882
ord12664
ord9475
ord6678
ord3254
ord2184
ord5837
ord3439
ord316
ord901
ord4283
ord1982
ord5776
ord1263
ord895
ord1292
ord6090
ord8304
ord9286
ord7357
ord4772
ord6888
ord6898
ord6897
ord5444
ord1854
ord4774
ord4625
ord5123
ord310
ord943
ord5095
ord4903
ord4622
ord11103
ord2846
ord2944
ord2945
ord11060
ord2338
ord5253
ord12482
ord10672
ord6128
ord13300
ord7074
ord13302
ord2661
ord3984
ord13980
ord3991
ord4401
ord4368
ord4364
ord4398
ord4419
ord4377
ord4406
ord4415
ord4385
ord4389
ord4393
ord4381
ord4410
ord4373
ord1514
ord1507
ord1509
ord1503
ord1496
ord11188
ord11190
ord12644
ord2847
ord8351
ord9994
ord6217
ord11154
ord8070
ord13294
ord10883
ord3395
ord11025
ord8231
ord13973
ord13972
ord14045
ord13219
ord12865
ord14062
ord14058
ord14060
ord14061
ord14059
ord2417
ord7349
ord2878
ord2881
ord12535
ord7871
ord6213
ord1900
ord4344
ord3988
ord2219
ord4131
ord6117
ord7933
ord7491
ord7927
ord11924
ord5774
ord4606
ord2183
ord5534
ord2838
ord3755
ord946
ord381
ord6134
ord6588
ord1889
ord3484
ord1296
ord2613
ord1290
ord890
ord12681
ord2068
ord2023
ord4345
ord12344
ord11940
ord6054
ord796
ord11939
ord337
ord4340
ord1210
ord788
ord917
ord341
ord6836
ord2626
ord305
ord5242
ord2611
ord300
ord11439
ord4498
ord2063
ord2067
ord8439
ord1316
ord3354
ord919
ord5784
ord8224
ord2744
ord3741
ord4881
ord7861
ord374

msvcr100

_amsg_exit
__CppXcptFilter
atoi
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_initterm_e
__clean_type_info_names_internal
__dllonexit
_unlock
_mbscmp
_purecall
memmove
calloc
_initterm
_onexit
_encoded_null
_malloc_crt
_lock
_except_handler4_common
__CxxFrameHandler3
memcpy
_wtoi
memset
_vsnprintf
ceil
floor
fabs
_recalloc
free
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
malloc
realloc
?what@exception@std@@UBEPBDXZ
_CxxThrowException

kernel32

WaitForSingleObject
ResumeThread
Sleep
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
CloseHandle
lstrcmpW
CreateEventA
SetEvent
ResetEvent
WaitForMultipleObjects
GetPrivateProfileIntA
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleA
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetVersionExA
CreateThread
MulDiv
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount

user32

DeferWindowPos
BeginDeferWindowPos
InvalidateRect
GetClientRect
GetWindowRect
LoadImageA
SendMessageA
SetTimer
KillTimer
GetFocus
CreatePopupMenu
AppendMenuA
CheckMenuItem
TrackPopupMenuEx
SetRectEmpty
IsWindowVisible
IsRectEmpty
GetDC
ReleaseDC
IsWindow
GetClassInfoA
EndDeferWindowPos
LoadCursorA
SetCapture
SetCursor
ShowCursor
GetMessageA
GetCapture
DispatchMessageA
ReleaseCapture
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
CopyRect
OffsetRect
GetSystemMetrics
SetWindowPos
UpdateWindow
LoadMenuW
GetSubMenu
GetParent
PeekMessageA
RedrawWindow
DefWindowProcA
EnableWindow
GetQueueStatus
RegisterWindowMessageA
PostThreadMessageA
MsgWaitForMultipleObjects
SetRect

gdi32

GetObjectA
CreateCompatibleBitmap
GetDeviceCaps
CreatePalette
Rectangle
CreatePen
SetDIBitsToDevice
CreateFontA
GetDIBits
SelectPalette
CreateBrushIndirect
CreateCompatibleDC
CreateSolidBrush
OffsetRgn
ExtCreateRegion
GetRegionData
Polygon
DeleteObject
BitBlt
PatBlt
SelectObject
DeleteDC
RealizePalette
CreateDIBSection

comdlg32

GetSaveFileNameA

ole32

CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize

winmm

timeBeginPeriod
timeKillEvent
timeSetEvent
timeGetTime
timeEndPeriod

ltkrnu

ord67

ltdisu

ord18

ltfilu

ord182

ltdica

?GetNextElement@LDicomDS@@QAEPAU_DICOMELEMENT@@PAU2@HH@Z
?InsertElement@LDicomDS@@QAEPAU_DICOMELEMENT@@PAU2@HIGHI@Z
?SetConvertValue@LDicomDS@@QAEHPAU_DICOMELEMENT@@PADI@Z
?SetStringValue@LDicomDS@@QAEHPAU_DICOMELEMENT@@PADII@Z
?GetChildElement@LDicomDS@@QAEPAU_DICOMELEMENT@@PAU2@H@Z
?FindFirstElement@LDicomDS@@QAEPAU_DICOMELEMENT@@PAU2@IH@Z
?LoadDS@LDicomDS@@QAEGPADG@Z
??1LDicomDS@@QAE@XZ
??0LDicomDS@@QAE@PAD@Z
?SaveDS@LDicomDS@@QAEGPADG@Z

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

avifil32

AVIStreamSetFormat
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVIMakeCompressedStream
AVISaveOptions
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit

Exports

Exports

??4CResAutoMana@@QAEAAV0@ABV0@@Z
?GetMax@CMyScrollBar@@QAEHXZ
?GetMin@CMyScrollBar@@QAEHXZ
?GetPos@CMyScrollBar@@QAEHXZ
?IsPushDown@CMyButton@@QAEHXZ
?OnOK@CProgressDlg@@MAEXXZ
?SetFocusMode@CMyButton@@QAEXH@Z
?SetScrollInfo@CMyScrollBar@@QAEXHHHHH@Z
CreateXeImage
CreateXeWnd
CreateXeWndSet
GetXeImageMana
GetXeWndMana

Sections

.text
Size: 1008KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5128576cde4d5144e2721d480fb6c2a5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

xeimageloader

xetools

xeui

mfc100

msvcr100

kernel32

user32

gdi32

comdlg32

ole32

winmm

ltkrnu

ltdisu

ltfilu

ltdica

msvcp100

avifil32

Exports

Exports

Sections

.text Size: 1008KB - Virtual size: 1007KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 23KB - Virtual size: 24KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 26KB - Virtual size: 26KB

.text
Size: 1008KB - Virtual size: 1007KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 23KB - Virtual size: 24KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 26KB - Virtual size: 26KB