8e6a8f09057ae33d44fc0cf943c9225801898c22b7893908e03df4f737cbb30a_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

8e6a8f09057ae33d44fc0cf943c9225801898c22b7893908e03df4f737cbb30a_NeikiAnalytics.exe
Size

156KB
MD5

8f83894d2d9807ea6000e01cc3551a40
SHA1

b7f419dd5eff0edbd0b333909f408fc969db6626
SHA256

8e6a8f09057ae33d44fc0cf943c9225801898c22b7893908e03df4f737cbb30a
SHA512

8687cafb2739614897eb8841a1fcabedc5a98b2bd97ed1402a9e12409add7124a589cbad1d42ae7de9da269088b23505b2c38d01375ea32d023f3fb47495c6b5
SSDEEP

3072:Lafy3i4MhT0a2tFRjhFnslzKgZD2jUY8c9zG/cMDBcIJHVKBW+TBfE9M/ClV:fpsF2jr8cZvITKc+TB8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e6a8f09057ae33d44fc0cf943c9225801898c22b7893908e03df4f737cbb30a_NeikiAnalytics.exe

Files

8e6a8f09057ae33d44fc0cf943c9225801898c22b7893908e03df4f737cbb30a_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

d38a77c546e3025a0ca84b0d0a133ae0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hankyungdll

?GetAllCodes@CHankyungWidgetDialog@@QAE?AV?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?OnDestroy@CHankyungWidgetDialog@@MAEXXZ
?Refresh@CHankyungWidgetDialog@@UAEXXZ
?OnParseCustomTag@CHankyungWidgetDialog@@MAEPAVCWnd@@PAVXMLWrap@@PAVXMLElement@@PAV2@@Z
??0CHankyungWidgetDialog@@QAE@IPAVCWnd@@@Z
?SetAdapter@CHankyungWidgetDialog@@QAEXPAX@Z
?OpenDLL@CHankyungWidgetDialog@@IAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetHTML@HKMConnAdapter@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V23@@Z
?SetItemText@CGridListCtrlEx@@QAEHHHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?NumberFormat@CHankyungWidgetDialog@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V23@@Z
?NumberFormat@CHankyungWidgetDialog@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V23@H@Z
?SetGridListTextColor@CHankyungWidgetDialog@@QAEXPAVCGridListCtrlEx@@HHEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddGridColor@CGridListCtrlEx@@QAEXHHKK@Z
?GetControlWnd@CHankyungWidgetDialog@@QAEPAVCWnd@@I@Z
?GetFocusRow@CGridListCtrlEx@@QBEHXZ
?GetItemText@CGridListCtrlEx@@QAE?AVCString@@HH@Z
?OpenDLL@CHankyungWidgetDialog@@IAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?OnKeyDown@CHankyungWidgetDialog@@IAEXIII@Z
?PreTranslateMessage@CHankyungWidgetDialog@@UAEHPAUtagMSG@@@Z
?LoadXML@CHankyungWidgetDialog@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?messageMap@CHankyungWidgetDialog@@1UAFX_MSGMAP@@B
?DoDataExchange@CHankyungWidgetDialog@@MAEXPAVCDataExchange@@@Z

mfc42

ord4080
ord4627
ord4425
ord3597
ord713
ord686
ord800
ord641
ord4710
ord3998
ord924
ord939
ord941
ord2818
ord540
ord4234
ord640
ord5785
ord2860
ord1640
ord323
ord5981
ord2379
ord6197
ord6453
ord2414
ord3089
ord6215
ord4299
ord3619
ord6055
ord1776
ord5290
ord3402
ord4424
ord1641
ord567
ord3626
ord3663
ord6199
ord2135
ord818
ord537
ord3874
ord2642
ord3079
ord4275
ord6880
ord535
ord6358
ord1088
ord858
ord926
ord2859
ord6267
ord4317
ord6272
ord506
ord5875
ord3876
ord4277
ord2763
ord4129
ord536
ord860
ord5856
ord859
ord4278
ord2764
ord925
ord3571
ord755
ord470
ord1949
ord6143
ord5710
ord6334
ord668
ord2652
ord1980
ord4058
ord3178
ord2781
ord2770
ord1669
ord356
ord801
ord541
ord2754
ord4133
ord4297
ord5788
ord472
ord6194
ord6128
ord816
ord2714
ord562
ord5861
ord6883
ord4204
ord5148
ord2065
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord2086
ord825
ord2864
ord1182
ord823
ord342
ord1253
ord1168
ord1795

msvcrt

wcslen
memmove
__CxxFrameHandler
_mbscmp
_access
_mbsicmp
towupper
_splitpath
_ftol
malloc
free
fseek
ftell
fread
fprintf
fwrite
fopen
fclose
sprintf
remove
strstr
strchr
strncpy
tolower
swprintf
strncmp
_adjust_fdiv
_initterm
_onexit
__dllonexit

kernel32

Sleep
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
DeleteCriticalSection

user32

EqualRect
ScreenToClient
SetRect
PtInRect
OffsetRect
SetScrollRange
IsRectEmpty
SetScrollPos
GetSysColor
PeekMessageA
DispatchMessageA
TranslateMessage
IsWindowVisible
GetCaretPos
GetKeyState
ReleaseCapture
SetCapture
GetWindowDC
InflateRect
GetDC
InvalidateRect
IsWindow
LoadCursorA
SetCursor
GetClientRect
GetCursorPos
GetWindowLongA
SetWindowLongA
KillTimer
RedrawWindow
SetTimer
GetSystemMetrics
PostMessageA
GetWindowRect
EnableWindow
SendMessageA
GetDesktopWindow
GetParent
SetParent
CopyRect

gdi32

SelectObject
CreateFontA
DeleteObject
CreateSolidBrush
CreateCompatibleDC
BitBlt
GetStockObject
GetPixel
StretchDIBits
SetDIBitsToDevice
CreateCompatibleBitmap

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

SHAppBarMessage

comctl32

_TrackMouseEvent

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Xran@std@@YAXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

Exports

Exports

HKMDLLExit
HKMDLLInit
HKMGetCodeList
HKMGetParent
HKMGetWindowHWND
HKMSetAdapter
HKMSetParent

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d38a77c546e3025a0ca84b0d0a133ae0

Headers

File Characteristics

Imports

hankyungdll

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

msvcp60

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 4KB - Virtual size: 67KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 28KB - Virtual size: 24KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 4KB - Virtual size: 67KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 28KB - Virtual size: 24KB