127498ece011f2c200dc28bd2fa27b2235d20757b60a6b57fa7154a2918d255c_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

127498ece011f2c200dc28bd2fa27b2235d20757b60a6b57fa7154a2918d255c_NeikiAnalytics.exe
Size

5.0MB
MD5

49fbcedc4c2a8904df9c3c1be54f1f20
SHA1

4c1e5dbd16d706193f14775a838b03eaa7b5eaa6
SHA256

127498ece011f2c200dc28bd2fa27b2235d20757b60a6b57fa7154a2918d255c
SHA512

ed580dc5b7bd1bf1f58efbfc366910cc2502103ca2ce0a21b044d13b46ecd8bf46dc5ff118b5f07e3a578b302e2d9b419e7c368075f9afb90a2fd610d9915dc1
SSDEEP

49152:D4q+MtkFyZfRO5jn/JKJOv20mK8PiRwYaezstP6iNPDABCNlUOJhhpzOnZoYV7w6:D4tMtayC/PO3PiBOeOJHpzOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
127498ece011f2c200dc28bd2fa27b2235d20757b60a6b57fa7154a2918d255c_NeikiAnalytics.exe

Files

127498ece011f2c200dc28bd2fa27b2235d20757b60a6b57fa7154a2918d255c_NeikiAnalytics.exe
.dll regsvr32 windows:6 windows x86 arch:x86

48c9aaf4bea006c9bf7b2aee20f3af11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetConsoleCP
FlushConsoleInputBuffer
GlobalMemoryStatus
DecodePointer
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
GetTickCount
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
MulDiv
lstrcmpW
lstrcmpiW
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
DeleteFileA
GetFileSize
ReadFile
GetTempPathA
CloseHandle
EncodePointer
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
CreateThread
Sleep
SetConsoleMode
SetEndOfFile
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
FlushFileBuffers
SetStdHandle
LCMapStringW
CompareStringW
SetFilePointerEx
GetFileSizeEx
GetStdHandle
HeapReAlloc
HeapSize
GetFullPathNameW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
TlsFree
InterlockedFlushSList
RtlUnwind
GetCPInfo
WriteConsoleW
ReadConsoleInputW
GetStringTypeW
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetProcessHeap
HeapFree
HeapAlloc
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleHandleA
TlsSetValue
TlsGetValue
TlsAlloc
DuplicateHandle
GetCurrentThread
GetCurrentProcess
InterlockedCompareExchange
InterlockedIncrement
InitializeCriticalSectionEx
GetTempFileNameA
FormatMessageW
CreateMutexW
InitializeCriticalSection
LoadLibraryExA
GetTimeZoneInformation
LoadLibraryA
GetCurrentDirectoryW
GetFileAttributesW
FindNextFileW
SystemTimeToFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsA
CreateMutexA
WaitForSingleObject
LocalAlloc
ReleaseMutex
OpenMutexA
GetWindowsDirectoryA
LocalFree
GetCurrentProcessId
GetSystemTime
CreateFileW
DeleteFileW
FormatMessageA
GetTempPathW
GetSystemDefaultLangID
TerminateThread
LoadLibraryW
GetModuleFileNameA
FindClose
GetVersionExW
GetSystemDirectoryA
WriteFile
SetFilePointer
GetFileInformationByHandle
GetLastError

user32

CopyAcceleratorTableW
GetDC
ReleaseDC
SetWindowRgn
InvalidateRect
InvalidateRgn
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetWindowContextHelpId
ClientToScreen
ScreenToClient
GetSysColor
FillRect
IntersectRect
UnionRect
SetFocus
EqualRect
CreateAcceleratorTableW
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
EnumChildWindows
CharNextW
GetSystemMetrics
SystemParametersInfoW
GetUserObjectInformationW
GetProcessWindowStation
MapDialogRect
IsDialogMessageW
LoadCursorW
GetWindow
GetClassNameW
GetNextDlgTabItem
SendDlgItemMessageW
EndDialog
CreateDialogIndirectParamW
DestroyAcceleratorTable
ReleaseCapture
PtInRect
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
SendMessageW
RegisterWindowMessageW
LoadImageW
GetClientRect
RedrawWindow
EndPaint
BeginPaint
DrawTextW
keybd_event
DialogBoxParamW
GetDlgItem
SetCapture
GetKeyState
OffsetRect
MessageBoxA
SetForegroundWindow
KillTimer
SendDlgItemMessageA
LoadIconW
LoadBitmapW
SetWindowTextA
GetWindowTextA
GetDlgCtrlID
DrawTextA
SetTimer
GetDlgItemTextA
LoadStringW
GetWindowRect
MapWindowPoints
RegisterDeviceNotificationW
MessageBoxW
UpdateWindow
GetFocus

gdi32

GetStockObject
SelectObject
SetBkMode
StretchBlt
SetTextColor
GetObjectW
BitBlt
CloseMetaFile
CreateCompatibleBitmap
CreateDCW
CreateMetaFileW
CreateRectRgnIndirect
CreateSolidBrush
DeleteMetaFile
GetDeviceCaps
Rectangle
RestoreDC
SaveDC
SetBkColor
SetMapMode
LPtoDP
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
DeleteObject
DeleteDC
CreateCompatibleDC
SetStretchBltMode
CreateFontW
CreateFontA

advapi32

DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptGenRandom
CryptDestroyKey
CryptSetProvParam
CryptGetKeyParam
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptVerifySignatureW
CryptExportKey
CryptCreateHash
CryptHashData
CryptSetHashParam
CryptDestroyHash
CryptSetKeyParam
CryptImportKey
CryptSignHashW
CryptGetHashParam
CryptReleaseContext
CloseServiceHandle
RegQueryValueExA
OpenSCManagerW
RegCreateKeyExA
RegSetValueExA
StartServiceW
RegOpenKeyExA
QueryServiceStatusEx
RegEnumKeyExA
OpenServiceA
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
InitializeSecurityDescriptor
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey

ole32

OleRegGetMiscStatus
OleRegEnumVerbs
OleSetContainedObject
CoUninitialize
CLSIDFromString
CoInitializeEx
OleRun
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
OleRegGetUserType
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemFree
CreateOleAdviseHolder
WriteClassStm
CreateDataAdviseHolder
OleInitialize
OleUninitialize
OleSaveToStream
CoInitialize
OleLockRunning
ReadClassStm

oleaut32

SafeArrayAccessData
GetErrorInfo
UnRegisterTypeLi
RegisterTypeLi
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreate
OleCreateFontIndirect
OleTranslateColor
OleCreatePropertyFrame
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA

ws2_32

ioctlsocket
freeaddrinfo
getsockopt
recv
connect
socket
send
WSAStartup
getaddrinfo
select
closesocket
__WSAFDIsSet
htonl
htons
inet_addr
inet_ntoa
ntohs
gethostbyaddr
gethostbyname
getservbyport
getservbyname
WSACleanup
WSASetLastError
shutdown
listen
getsockname
bind
WSAGetLastError

winscard

SCardListReadersA
g_rgSCardRawPci
SCardDisconnect
SCardTransmit
g_rgSCardT1Pci
SCardGetStatusChangeA
SCardEstablishContext
SCardReleaseContext
SCardStatusA
g_rgSCardT0Pci
SCardConnectA

comctl32

ImageList_Create
_TrackMouseEvent
ImageList_ReplaceIcon

crypt32

CryptEncodeObject
CryptMsgGetParam
CertCloseStore
CertFreeCertificateContext
CryptMsgUpdate
CryptMsgClose
CryptDecodeObjectEx
CertCreateCertificateContext
CryptDecodeObject
CryptExportPublicKeyInfoFromBCryptKeyHandle
CryptMsgOpenToDecode

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shell32

ShellExecuteW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UTF8ToHtml
UTF8Toisolat1
__docbDefaultSAXHandler
__htmlDefaultSAXHandler
__oldXMLWDcompatibility
__xmlBufferAllocScheme
__xmlDefaultBufferSize
__xmlDefaultSAXHandler
__xmlDefaultSAXLocator
__xmlDeregisterNodeDefaultValue
__xmlDoValidityCheckingDefaultValue
__xmlErrEncoding
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlIndentTreeOutput
__xmlKeepBlanksDefaultValue
__xmlLastError
__xmlLineNumbersDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlOutputBufferCreateFilenameValue
__xmlParserDebugEntities
__xmlParserInputBufferCreateFilenameValue
__xmlParserVersion
__xmlPedanticParserDefaultValue
__xmlRaiseError
__xmlRegisterNodeDefaultValue
__xmlSaveNoEmptyTags
__xmlSimpleError
__xmlStructuredError
__xmlStructuredErrorContext
__xmlSubstituteEntitiesDefaultValue
__xmlTreeIndentString
docbDefaultSAXHandlerInit
emptyExp
forbiddenExp
htmlAttrAllowed
htmlAutoCloseTag
htmlCreateFileParserCtxt
htmlCreateMemoryParserCtxt
htmlCreatePushParserCtxt
htmlCtxtReadDoc
htmlCtxtReadFd
htmlCtxtReadFile
htmlCtxtReadIO
htmlCtxtReadMemory
htmlCtxtReset
htmlCtxtUseOptions
htmlDefaultSAXHandlerInit
htmlDocContentDumpFormatOutput
htmlDocContentDumpOutput
htmlDocDump
htmlDocDumpMemory
htmlDocDumpMemoryFormat
htmlElementAllowedHere
htmlElementStatusHere
htmlEncodeEntities
htmlEntityLookup
htmlEntityValueLookup
htmlFreeParserCtxt
htmlGetMetaEncoding
htmlHandleOmittedElem
htmlInitAutoClose
htmlIsAutoClosed
htmlIsBooleanAttr
htmlIsScriptAttribute
htmlNewDoc
htmlNewDocNoDtD
htmlNewParserCtxt
htmlNodeDump
htmlNodeDumpFile
htmlNodeDumpFileFormat
htmlNodeDumpFormatOutput
htmlNodeDumpOutput
htmlNodeStatus
htmlParseCharRef
htmlParseChunk
htmlParseDoc
htmlParseDocument
htmlParseElement
htmlParseEntityRef
htmlParseFile
htmlReadDoc
htmlReadFd
htmlReadFile
htmlReadIO
htmlReadMemory
htmlSAXParseDoc
htmlSAXParseFile
htmlSaveFile
htmlSaveFileEnc
htmlSaveFileFormat
htmlSetMetaEncoding
htmlTagLookup
initGenericErrorDefaultFunc
initdocbDefaultSAXHandler
inithtmlDefaultSAXHandler
initxmlDefaultSAXHandler
inputPop
inputPush
isolat1ToUTF8
namePop
namePush
nodePop
nodePush
valuePop
valuePush
xmlACatalogAdd
xmlACatalogDump
xmlACatalogRemove
xmlACatalogResolve
xmlACatalogResolvePublic
xmlACatalogResolveSystem
xmlACatalogResolveURI
xmlAddAttributeDecl
xmlAddChild
xmlAddChildList
xmlAddDocEntity
xmlAddDtdEntity
xmlAddElementDecl
xmlAddEncodingAlias
xmlAddID
xmlAddNextSibling
xmlAddNotationDecl
xmlAddPrevSibling
xmlAddRef
xmlAddSibling
xmlAllocOutputBuffer
xmlAllocParserInputBuffer
xmlAttrSerializeTxtContent
xmlAutomataCompile
xmlAutomataGetInitState
xmlAutomataIsDeterminist
xmlAutomataNewAllTrans
xmlAutomataNewCountTrans
xmlAutomataNewCountTrans2
xmlAutomataNewCountedTrans
xmlAutomataNewCounter
xmlAutomataNewCounterTrans
xmlAutomataNewEpsilon
xmlAutomataNewNegTrans
xmlAutomataNewOnceTrans
xmlAutomataNewOnceTrans2
xmlAutomataNewState
xmlAutomataNewTransition
xmlAutomataNewTransition2
xmlAutomataSetFinalState
xmlBoolToText
xmlBufferAdd
xmlBufferAddHead
xmlBufferCCat
xmlBufferCat
xmlBufferContent
xmlBufferCreate
xmlBufferCreateSize
xmlBufferCreateStatic
xmlBufferDump
xmlBufferEmpty
xmlBufferFree
xmlBufferGrow
xmlBufferLength
xmlBufferResize
xmlBufferSetAllocationScheme
xmlBufferShrink
xmlBufferWriteCHAR
xmlBufferWriteChar
xmlBufferWriteQuotedString
xmlBuildQName
xmlBuildRelativeURI
xmlBuildURI
xmlByteConsumed
xmlC14NDocDumpMemory
xmlC14NDocSave
xmlC14NDocSaveTo
xmlC14NExecute
xmlCanonicPath
xmlCatalogAdd
xmlCatalogAddLocal
xmlCatalogCleanup
xmlCatalogConvert
xmlCatalogDump
xmlCatalogFreeLocal
xmlCatalogGetDefaults
xmlCatalogGetPublic
xmlCatalogGetSystem
xmlCatalogIsEmpty
xmlCatalogLocalResolve
xmlCatalogLocalResolveURI
xmlCatalogRemove
xmlCatalogResolve
xmlCatalogResolvePublic
xmlCatalogResolveSystem
xmlCatalogResolveURI
xmlCatalogSetDebug
xmlCatalogSetDefaultPrefer
xmlCatalogSetDefaults
xmlCharEncCloseFunc
xmlCharEncFirstLine
xmlCharEncInFunc
xmlCharEncOutFunc
xmlCharInRange
xmlCharStrdup
xmlCharStrndup
xmlCheckFilename
xmlCheckHTTPInput
xmlCheckLanguageID
xmlCheckUTF8
xmlCheckVersion
xmlChildElementCount
xmlCleanupCharEncodingHandlers
xmlCleanupEncodingAliases
xmlCleanupGlobals
xmlCleanupInputCallbacks
xmlCleanupMemory
xmlCleanupOutputCallbacks
xmlCleanupParser
xmlCleanupThreads
xmlClearNodeInfoSeq
xmlClearParserCtxt
xmlConvertSGMLCatalog
xmlCopyAttributeTable
xmlCopyChar
xmlCopyCharMultiByte
xmlCopyDoc
xmlCopyDocElementContent
xmlCopyDtd
xmlCopyElementContent
xmlCopyElementTable
xmlCopyEntitiesTable
xmlCopyEnumeration
xmlCopyError
xmlCopyNamespace
xmlCopyNamespaceList
xmlCopyNode
xmlCopyNodeList
xmlCopyNotationTable
xmlCopyProp
xmlCopyPropList
xmlCreateDocParserCtxt
xmlCreateEntitiesTable
xmlCreateEntityParserCtxt
xmlCreateEnumeration
xmlCreateFileParserCtxt
xmlCreateIOParserCtxt
xmlCreateIntSubset
xmlCreateMemoryParserCtxt
xmlCreatePushParserCtxt
xmlCreateURI
xmlCreateURLParserCtxt
xmlCtxtGetLastError
xmlCtxtReadDoc
xmlCtxtReadFd
xmlCtxtReadFile
xmlCtxtReadIO
xmlCtxtReadMemory
xmlCtxtReset
xmlCtxtResetLastError
xmlCtxtResetPush
xmlCtxtUseOptions
xmlCurrentChar
xmlDOMWrapAdoptNode
xmlDOMWrapCloneNode
xmlDOMWrapFreeCtxt
xmlDOMWrapNewCtxt
xmlDOMWrapReconcileNamespaces
xmlDOMWrapRemoveNode
xmlDebugCheckDocument
xmlDebugDumpAttr
xmlDebugDumpAttrList
xmlDebugDumpDTD
xmlDebugDumpDocument
xmlDebugDumpDocumentHead
xmlDebugDumpEntities
xmlDebugDumpNode
xmlDebugDumpNodeList
xmlDebugDumpOneNode
xmlDebugDumpString
xmlDefaultSAXHandlerInit
xmlDelEncodingAlias
xmlDeregisterNodeDefault
xmlDetectCharEncoding
xmlDictCleanup
xmlDictCreate
xmlDictCreateSub
xmlDictExists
xmlDictFree
xmlDictLookup
xmlDictOwns
xmlDictQLookup
xmlDictReference
xmlDictSize
xmlDocCopyNode
xmlDocCopyNodeList
xmlDocDump
xmlDocDumpFormatMemory
xmlDocDumpFormatMemoryEnc
xmlDocDumpMemory
xmlDocDumpMemoryEnc
xmlDocFormatDump
xmlDocGetRootElement
xmlDocSetRootElement
xmlDumpAttributeDecl
xmlDumpAttributeTable
xmlDumpElementDecl
xmlDumpElementTable
xmlDumpEntitiesTable
xmlDumpEntityDecl
xmlDumpNotationDecl
xmlDumpNotationTable
xmlElemDump
xmlEncodeEntitiesReentrant
xmlEncodeSpecialChars
xmlErrMemory
xmlExpCtxtNbCons
xmlExpCtxtNbNodes
xmlExpDump
xmlExpExpDerive
xmlExpFree
xmlExpFreeCtxt
xmlExpGetLanguage
xmlExpGetStart
xmlExpIsNillable
xmlExpMaxToken
xmlExpNewAtom
xmlExpNewCtxt
xmlExpNewOr
xmlExpNewRange
xmlExpNewSeq
xmlExpParse
xmlExpRef
xmlExpStringDerive
xmlExpSubsume
xmlFileClose
xmlFileMatch
xmlFileOpen
xmlFileRead
xmlFindCharEncodingHandler
xmlFirstElementChild
xmlFree
xmlFreeAttributeTable
xmlFreeAutomata
xmlFreeCatalog
xmlFreeDoc
xmlFreeDocElementContent
xmlFreeDtd
xmlFreeElementContent
xmlFreeElementTable
xmlFreeEntitiesTable
xmlFreeEnumeration
xmlFreeIDTable
xmlFreeInputStream
xmlFreeMutex
xmlFreeNode
xmlFreeNodeList
xmlFreeNotationTable
xmlFreeNs
xmlFreeNsList
xmlFreeParserCtxt
xmlFreeParserInputBuffer
xmlFreePattern
xmlFreePatternList
xmlFreeProp
xmlFreePropList
xmlFreeRMutex
xmlFreeRefTable
xmlFreeStreamCtxt
xmlFreeTextReader
xmlFreeURI
xmlFreeValidCtxt
xmlGcMemGet
xmlGcMemSetup
xmlGetBufferAllocationScheme
xmlGetCharEncodingHandler
xmlGetCharEncodingName
xmlGetCompressMode
xmlGetDocCompressMode
xmlGetDocEntity
xmlGetDtdAttrDesc
xmlGetDtdElementDesc
xmlGetDtdEntity
xmlGetDtdNotationDesc
xmlGetDtdQAttrDesc
xmlGetDtdQElementDesc
xmlGetEncodingAlias
xmlGetExternalEntityLoader
xmlGetGlobalState
xmlGetID
xmlGetIntSubset
xmlGetLastChild
xmlGetLastError
xmlGetLineNo
xmlGetNoNsProp
xmlGetNodePath
xmlGetNsList
xmlGetNsProp
xmlGetParameterEntity
xmlGetPredefinedEntity
xmlGetProp
xmlGetRefs
xmlGetThreadId
xmlGetUTF8Char
xmlHasFeature
xmlHasNsProp
xmlHasProp
xmlHashAddEntry
xmlHashAddEntry2
xmlHashAddEntry3
xmlHashCopy
xmlHashCreate
xmlHashCreateDict
xmlHashFree
xmlHashLookup
xmlHashLookup2
xmlHashLookup3
xmlHashQLookup
xmlHashQLookup2
xmlHashQLookup3
xmlHashRemoveEntry
xmlHashRemoveEntry2
xmlHashRemoveEntry3
xmlHashScan
xmlHashScan3
xmlHashScanFull
xmlHashScanFull3
xmlHashSize
xmlHashUpdateEntry
xmlHashUpdateEntry2
xmlHashUpdateEntry3
xmlIOFTPClose
xmlIOFTPMatch
xmlIOFTPOpen
xmlIOFTPRead
xmlIOHTTPClose
xmlIOHTTPMatch
xmlIOHTTPOpen
xmlIOHTTPOpenW
xmlIOHTTPRead
xmlIOParseDTD
xmlInitCharEncodingHandlers
xmlInitGlobals
xmlInitMemory
xmlInitNodeInfoSeq
xmlInitParser
xmlInitParserCtxt
xmlInitThreads
xmlInitializeCatalog
xmlInitializeGlobalState
xmlIsBaseChar
xmlIsBaseCharGroup
xmlIsBlank
xmlIsBlankNode
xmlIsChar
xmlIsCharGroup
xmlIsCombining
xmlIsCombiningGroup
xmlIsDigit
xmlIsDigitGroup
xmlIsExtender
xmlIsExtenderGroup
xmlIsID
xmlIsIdeographic
xmlIsIdeographicGroup
xmlIsLetter
xmlIsMainThread
xmlIsMixedElement
xmlIsPubidChar
xmlIsPubidChar_tab
xmlIsRef
xmlIsXHTML
xmlKeepBlanksDefault
xmlLastElementChild
xmlLineNumbersDefault
xmlLinkGetData
xmlListAppend
xmlListClear
xmlListCopy
xmlListCreate
xmlListDelete
xmlListDup
xmlListEmpty
xmlListEnd
xmlListFront
xmlListInsert
xmlListMerge
xmlListPopBack
xmlListPopFront
xmlListPushBack
xmlListPushFront
xmlListRemoveAll
xmlListRemoveFirst
xmlListRemoveLast
xmlListReverse
xmlListReverseSearch
xmlListReverseWalk
xmlListSearch
xmlListSize

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48c9aaf4bea006c9bf7b2aee20f3af11

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

setupapi

ws2_32

winscard

comctl32

crypt32

version

shell32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 542KB - Virtual size: 542KB

.data Size: 58KB - Virtual size: 97KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 121KB - Virtual size: 121KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 542KB - Virtual size: 542KB

.data
Size: 58KB - Virtual size: 97KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 121KB - Virtual size: 121KB