99ff355c792adf168ac9aed2cc7ab3d40667728f2a3378bbf2516d157c18a1f0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

99ff355c792adf168ac9aed2cc7ab3d40667728f2a3378bbf2516d157c18a1f0_NeikiAnalytics.exe
Size

180KB
MD5

ebc37698113f437213e663f3219a2380
SHA1

5cae24081e3c94064a0f985901fee6d373d841be
SHA256

99ff355c792adf168ac9aed2cc7ab3d40667728f2a3378bbf2516d157c18a1f0
SHA512

d4994704c650a79d7718d270209f8c1913a7044e4f92f45e158cf64ce151d18c118c215a216293aa056bdc7a1e8c5a70eadfce28437517fbb9f4b100a075503f
SSDEEP

3072:RbuwLKr+IKvrPoSHv8jK//q26l/DWpYJQhAdZh2wB02c:Rbuw5t/S26lLWpnAdTB0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99ff355c792adf168ac9aed2cc7ab3d40667728f2a3378bbf2516d157c18a1f0_NeikiAnalytics.exe

Files

99ff355c792adf168ac9aed2cc7ab3d40667728f2a3378bbf2516d157c18a1f0_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

15d68518e05442cd7f566c1373c9d29a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\aa\golf\P_2022.01.04_NewResolutionPlatform_SmartPSS_Lite_20230530_bugfix_Golf\CommModules\DCMBaseCore\bin\RealStream.pdb

Imports

libdsl

??1DRefObj@dsl@@MEAA@XZ
?addref@DRefObj@dsl@@AEAAHXZ
?release@DRefObj@dsl@@AEAAHXZ
??0DTimerHandler@dsl@@QEAA@XZ
??1DTimerHandler@dsl@@MEAA@XZ
??0DMessage@dsl@@QEAA@H@Z
??1DMessage@dsl@@UEAA@XZ
?GetType@DMessage@dsl@@QEBAHXZ
??0DRefObj@dsl@@IEAA@XZ
??0DMessageQueue@dsl@@QEAA@II@Z
?QueueSize@DMessageQueue@dsl@@UEAAHXZ
?IsRunning@DMessageQueue@dsl@@QEBA_NXZ
?GetTime@DTime@dsl@@SA_JXZ
?Start@DMessageQueue@dsl@@UEAAHXZ
?SignalStop@DMessageQueue@dsl@@UEAAHXZ
?Stop@DMessageQueue@dsl@@UEAAHXZ
?PushMsg@DMessageQueue@dsl@@UEAAHPEAVDMessage@2@@Z
??1DMessageQueue@dsl@@MEAA@XZ
?Reset@DRefObj@dsl@@UEAAXXZ
??_DDMessage@dsl@@QEAAXXZ
?GetObjInfo@DRefObj@dsl@@UEBAXPEAVDStr@2@@Z
?destroy@DRefObj@dsl@@MEAAXXZ
??0DMutexGuard@dsl@@QEAA@PEAVDMutex@1@@Z
??1DMutexGuard@dsl@@QEAA@XZ
??0DTimerMgr@dsl@@QEAA@XZ
??1DTimerMgr@dsl@@UEAA@XZ
?CreateTimer@DTimerMgr@dsl@@QEAAIPEAVDTimerHandler@2@@Z
?StartTimer@DTimerMgr@dsl@@QEAAHIH@Z
?DestroyTimer@DTimerMgr@dsl@@QEAAHI@Z
??0DMutex@dsl@@QEAA@XZ
??1DMutex@dsl@@QEAA@XZ

platformsdk

??1RealNotifyReceiveFirstFrameMsg@DPSdk@@UEAA@XZ
??0RealNotifyReceiveFirstFrameMsg@DPSdk@@QEAA@XZ
??1RealCloseVideoMsg@DPSdk@@UEAA@XZ
??0RealCloseVideoMsg@DPSdk@@QEAA@XZ
??1RealOpenFailedMsg@DPSdk@@UEAA@XZ
??0RealOpenFailedMsg@DPSdk@@QEAA@XZ
??1RealOpenVideoMsg@DPSdk@@UEAA@XZ
??0RealOpenVideoMsg@DPSdk@@QEAA@XZ
??4DPSDKCBMessage@DPSdk@@QEAAAEAV01@AEBV01@@Z
??0DPSDKCBMessage@DPSdk@@QEAA@HHHH@Z
??1DPSDKCBMessage@DPSdk@@UEAA@XZ

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

vcruntime140

__vcrt_LoadLibraryExW
__vcrt_GetModuleFileNameW
memset
__CxxFrameHandler3
memmove
memcpy
_purecall
memchr
__std_terminate
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

strlen
strcpy_s
strcat_s

api-ms-win-crt-convert-l1-1-0

atoi
_atoi64

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_initterm
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_initterm_e

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

kernel32

GetProcAddress
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
WideCharToMultiByte
MultiByteToWideChar
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

Exports

Exports

??0CRealStreamInstance@DCM@@QEAA@AEBV01@@Z
??0CRealStreamInstance@DCM@@QEAA@XZ
??0IRealStreamComponent@DCM@@QEAA@AEBV01@@Z
??0IRealStreamComponent@DCM@@QEAA@XZ
??1CRealStreamInstance@DCM@@UEAA@XZ
??1IRealStreamComponent@DCM@@UEAA@XZ
??4CRealStreamInstance@DCM@@QEAAAEAV01@AEBV01@@Z
??4IRealStreamComponent@DCM@@QEAAAEAV01@AEBV01@@Z
??_7CRealStreamInstance@DCM@@6B@
??_7IRealStreamComponent@DCM@@6B@
?CreateRealStreamInstance@CRealStreamInstance@DCM@@QEAAPEAVIRealStreamComponent@2@XZ

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15d68518e05442cd7f566c1373c9d29a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libdsl

platformsdk

msvcp140

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

api-ms-win-crt-stdio-l1-1-0

Exports

Exports

Sections

.text Size: 127KB - Virtual size: 127KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 11KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 568B

.text
Size: 127KB - Virtual size: 127KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 568B