b6e8e61c68abe57455867cc5a8f8ff96c1efabc4c9ced308bd910697af173429_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b6e8e61c68abe57455867cc5a8f8ff96c1efabc4c9ced308bd910697af173429_NeikiAnalytics.exe
Size

7.2MB
MD5

291ea6326c6ab29296671acc2c52a500
SHA1

f6466d4510f8f155004704d4d33caa975a20fc2d
SHA256

b6e8e61c68abe57455867cc5a8f8ff96c1efabc4c9ced308bd910697af173429
SHA512

bde676bf2241621600e725d9481cb91aab976722f62166be7eb5fdd48c5e8987576669eb9c1182302d3ac307247de2e50a5f443accb767d269e2bcf222afaa8d
SSDEEP

98304:ai4QCiXGmfQHZM+npjojDzBWtpmZbLkiPUc0F7IESr1da7b+/J3+PJfx:mQbdAZnnpjYXBa0McFRfa7b+x3qJfx

Score

1^/10

Malware Config

Signatures

Files

b6e8e61c68abe57455867cc5a8f8ff96c1efabc4c9ced308bd910697af173429_NeikiAnalytics.exe
.dll regsvr32 windows:5 windows x86 arch:x86

adde7b7c31b68f3ea9e2f850b90b9cd2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a4:23:c0:04:a9:c7:70:15:42:30:e5:d2:71:be:06:54
Certificate

Issuer

CN=SecureTrust CA,O=SecureTrust Corporation,C=US

Not Before

01/09/2016, 14:35

Not After

29/09/2024, 14:35

Subject

CN=Trustwave Code Signing SHA256 CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US,1.2.840.113549.1.9.1=#0c106361407472757374776176652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:03:ff:ac:ee:5c:64:be:1a:c9:3d:b7:8f:1a:e8:0d:da:61:82
Certificate

Issuer

CN=Trustwave Code Signing SHA256 CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US,1.2.840.113549.1.9.1=#0c106361407472757374776176652e636f6d

Not Before

30/07/2019, 19:12

Not After

30/07/2021, 01:12

Subject

CN=Codejock Technologies\, LLC,O=Codejock Technologies\, LLC,L=Owosso,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:e6:d6:b6:dd:47:a5:fc:87:2a:4c:cc:2f:60:84:98:9a:69:fa:98
Signer

Actual PE Digest

44:e6:d6:b6:dd:47:a5:fc:87:2a:4c:cc:2f:60:84:98:9a:69:fa:98

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN\Branch\ToolkitPro\Workspace\ActiveX\Controls\Unicode Release\Controls.pdb

Imports

kernel32

HeapQueryInformation
GetFullPathNameA
VirtualQuery
VirtualAlloc
GetSystemInfo
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
SetStdHandle
GetCommandLineA
SetFilePointerEx
PeekNamedPipe
GetFileType
GetDriveTypeW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
QueryPerformanceFrequency
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
GetACP
GetStdHandle
GetStringTypeW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
SetCurrentDirectoryW
SetConsoleCtrlHandler
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
WriteConsoleW
WaitForSingleObjectEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReadConsoleW
LocalUnlock
LocalLock
SearchPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
ReplaceFileW
GetDiskFreeSpaceW
lstrcpyW
FindResourceExW
GetAtomNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
SetErrorMode
GlobalGetAtomNameW
GetProfileIntW
GetUserDefaultLCID
FindNextFileW
VirtualProtect
SetFileAttributesW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
CreateSemaphoreW
WaitForMultipleObjects
CreateMutexW
ReleaseMutex
ReleaseSemaphore
LocalReAlloc
GlobalHandle
GlobalReAlloc
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
FlushFileBuffers
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetThreadLocale
FileTimeToSystemTime
CompareStringW
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
SuspendThread
CompareStringA
GetCurrentThread
SetLastError
OutputDebugStringA
HeapDestroy
DecodePointer
RaiseException
HeapReAlloc
HeapSize
LoadLibraryA
IsDBCSLeadByte
LocalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
TlsFree
SetFileTime
WriteFile
CreateDirectoryW
LocalFileTimeToFileTime
SystemTimeToFileTime
ExitProcess
LocalFree
FormatMessageW
GetPrivateProfileIntW
lstrlenW
FindClose
FindFirstFileW
lstrcmpW
IsBadStringPtrW
GetCurrentDirectoryW
GetTickCount
GlobalDeleteAtom
GlobalAddAtomW
GetFileSize
LoadLibraryExW
WaitForSingleObject
ResumeThread
SetThreadPriority
CreateEventW
CreateThread
SetEvent
GetModuleFileNameW
GetVersionExW
TlsAlloc
TlsSetValue
TlsGetValue
InterlockedExchange
HeapFree
GetProcessHeap
HeapAlloc
EnumResourceLanguagesW
EnumResourceTypesW
WideCharToMultiByte
EnumResourceNamesW
lstrcmpA
InitializeCriticalSectionAndSpinCount
GetLastError
GlobalSize
GlobalAlloc
GlobalFree
SetFilePointer
CloseHandle
ReadFile
CreateFileW
lstrcpynW
GetLocaleInfoW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTimeFormatW
GetDateFormatW
GetLocalTime
InterlockedIncrement
GlobalUnlock
GlobalLock
GetModuleHandleA
GetCurrentThreadId
Sleep
OutputDebugStringW
MulDiv
FreeResource
CopyFileW
GetPrivateProfileStringW
GetTempFileNameW
GetTempPathW
WritePrivateProfileStringW
GetPrivateProfileSectionNamesW
DeleteFileW
FindResourceW
LoadResource
LockResource
SizeofResource
GetFileAttributesW
MultiByteToWideChar
GetCurrentProcessId
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleHandleW
InterlockedDecrement
GetCommandLineW

user32

MessageBoxW
ShowOwnedPopups
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DrawAnimatedRects
EnumChildWindows
FindWindowW
SetForegroundWindow
SetParent
UnregisterClassW
TrackPopupMenu
GetDlgItem
DrawMenuBar
RemoveMenu
GetSystemMenu
GetMenu
SetWindowPlacement
SetClassLongW
WinHelpW
CreateAcceleratorTableW
VkKeyScanW
DestroyAcceleratorTable
IsChild
UnionRect
CharUpperW
GetTabbedTextExtentA
wsprintfW
GetTopWindow
CheckMenuItem
SetScrollPos
EnableMenuItem
EnableScrollBar
CreateCaret
DragDetect
SetCaretPos
DestroyCaret
GetScrollPos
GetMenuItemID
GetMenuItemCount
IsClipboardFormatAvailable
GetClipboardData
ShowCaret
HideCaret
ShowWindow
GetWindowPlacement
LoadIconW
GetClassLongW
GetNextDlgTabItem
MessageBeep
AdjustWindowRectEx
GetSysColorBrush
LoadStringW
SetWindowTextW
CloseClipboard
EmptyClipboard
OpenClipboard
SetActiveWindow
GetActiveWindow
DrawFocusRect
GetFocus
MoveWindow
GetDlgCtrlID
EqualRect
GetCursor
WindowFromPoint
GetClassInfoW
PostThreadMessageW
LoadMenuIndirectW
GetMenuStringW
LookupIconIdFromDirectoryEx
LoadMenuW
GetMenuState
SetClipboardData
LoadBitmapW
DrawStateW
CreateIconIndirect
CopyIcon
GetIconInfo
CreateIconFromResourceEx
LoadImageW
RegisterClipboardFormatW
SetWindowRgn
GetWindowRgn
CheckDlgButton
SetWindowLongA
GetWindowLongA
IsWindowUnicode
GrayStringW
DrawTextExW
EndPaint
GetSubMenu
RedrawWindow
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
ScrollWindowEx
IsDialogMessageW
IsWindowVisible
SendMessageW
SetTimer
PostQuitMessage
ValidateRect
PeekMessageW
DestroyIcon
DrawIconEx
GetLastActivePopup
GetForegroundWindow
DrawTextW
GetDialogBaseUnits
IntersectRect
ClientToScreen
GetDCEx
LockWindowUpdate
SetRectEmpty
CallNextHookEx
UnhookWindowsHookEx
GetDlgItemTextW
ScrollWindow
SetScrollRange
GetScrollRange
RemovePropW
GetWindowTextW
GetWindowTextLengthW
MapWindowPoints
SetScrollInfo
MonitorFromWindow
GetMonitorInfoW
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
InsertMenuW
SetWindowsHookExW
ReleaseDC
GetDesktopWindow
GetDC
TranslateMessage
ScreenToClient
GetDoubleClickTime
OffsetRect
GetSysColor
GetKeyState
GetScrollInfo
GetWindow
ShowScrollBar
SystemParametersInfoW
AppendMenuW
GetMessagePos
GetMessageTime
RegisterClassW
GetClassInfoExW
IsMenu
SetMenu
TrackPopupMenuEx
CopyImage
BeginPaint
KillTimer
InvalidateRect
UpdateWindow
GetClientRect
IsIconic
GetWindowLongW
SetWindowPos
GetWindowRect
TrackMouseEvent
PtInRect
GetCursorPos
LoadCursorW
SetCursor
GetSystemMetrics
IsWindowEnabled
SetFocus
SetCapture
PostMessageW
GetMessageW
DispatchMessageW
GetCapture
ReleaseCapture
EnableWindow
IsWindow
DestroyWindow
CreateWindowExW
GetWindowThreadProcessId
DefWindowProcW
FillRect
InvertRect
IsRectEmpty
CopyRect
InflateRect
DrawFrameControl
DrawEdge
RegisterWindowMessageW
GetParent
GetClassNameW
SetPropW
SetWindowLongW
SetRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetPropW
GetWindowDC
CreateDialogIndirectParamW
EndDialog
GetKeyNameTextW
TabbedTextOutW
MapVirtualKeyW
DestroyMenu
GetMenuItemInfoW
MsgWaitForMultipleObjectsEx
SetWindowContextHelpId
MapDialogRect
CharNextW
GetAsyncKeyState
SendDlgItemMessageA
BringWindowToTop
TranslateAcceleratorW
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
InvalidateRgn
CreateMenu
LoadAcceleratorsW
CreatePopupMenu
InsertMenuItemW
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
DestroyCursor
DrawIcon
CopyAcceleratorTableW
GetNextDlgGroupItem
DeleteMenu
RealChildWindowFromPoint
MonitorFromRect
SubtractRect
SendNotifyMessageW
GetUpdateRect
CharUpperBuffW
ModifyMenuW
SetMenuDefaultItem
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
WaitMessage
FrameRect
SetCursorPos
IsZoomed
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
GetMenuDefaultItem
WindowFromDC
InSendMessage
GetTabbedTextExtentW
CallWindowProcW

gdi32

TextOutW
ExtTextOutW
Escape
GetObjectType
CreateFontIndirectW
DPtoLP
ExtCreatePen
CreatePenIndirect
CreateRectRgn
CombineRgn
CreateDIBSection
SetTextColor
StretchBlt
SetStretchBltMode
GetDIBits
GetCurrentObject
GetBitmapBits
ExtCreateRegion
SetPixelV
CreatePolygonRgn
FillRgn
FrameRgn
PtInRegion
SetBoundsRect
GetCharWidthW
GetTextAlign
GetTextMetricsW
GetWindowOrgEx
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
Ellipse
Polyline
MoveToEx
LineTo
PolyBezierTo
CloseFigure
StrokeAndFillPath
FillPath
OffsetViewportOrgEx
GetClipBox
GetTextExtentPoint32A
GetCurrentPositionEx
IntersectClipRect
GetClipRgn
ExtSelectClipRgn
SetBkMode
RoundRect
GetRgnBox
SetAbortProc
StartDocW
StartPage
EndPage
EndDoc
AbortDoc
GetTextExtentPointW
GetBrushOrgEx
SetBrushOrgEx
CreateFontW
CopyMetaFileW
CreateDCW
CreateDIBPatternBrushPt
RectVisible
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
SelectPalette
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
SetRectRgn
StretchDIBits
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
LPtoDP
GetViewportOrgEx
OffsetRgn
CreateEllipticRgn
UnrealizeObject
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextFaceW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetDIBColorTable
CreateRoundRectRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
PtVisible
EndPath
BeginPath
GetTextExtentPoint32W
CreateBrushIndirect
CreateBitmap
SetBkColor
CreateHatchBrush
Rectangle
GetBkColor
GetBkMode
GetTextColor
EnumFontFamiliesExW
SetPixel
PatBlt
CreateSolidBrush
CreatePen
BitBlt
CreateRectRgnIndirect
GetObjectW
GetPixel
Polygon
GetDeviceCaps
GetStockObject
DeleteDC
DeleteObject
SelectObject
CreateCompatibleBitmap
ExcludeClipRect
StrokePath
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW

advapi32

SetFileSecurityW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
IsTextUnicode
RegDeleteKeyW
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegQueryValueW
RegSetValueW
GetFileSecurityW
RegCloseKey

shell32

ShellExecuteExW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHAddToRecentDocs
ExtractIconW
DragFinish
SHGetFileInfoW
Shell_NotifyIconW
DragQueryFileW
SHAppBarMessage
ShellExecuteW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW

comctl32

_TrackMouseEvent
ImageList_AddMasked
ImageList_GetIcon
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_Add
ImageList_Create
ImageList_Draw
ord17

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathAppendW
PathCombineW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetThemeColor
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
DrawThemeParentBackground
IsAppThemed
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent

ole32

OleQueryCreateFromData
OleQueryLinkFromData
OleSetMenuDescriptor
OleGetIconOfClass
OleLockRunning
OleSetContainedObject
OleDestroyMenuDescriptor
CreateDataAdviseHolder
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoRegisterClassObject
CoRevokeClassObject
ReadClassStm
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleLoadFromStream
PropVariantCopy
OleRegGetMiscStatus
OleRegEnumVerbs
OleTranslateAccelerator
IsAccelerator
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
WriteClassStm
CLSIDFromString
CreateGenericComposite
CreateItemMoniker
OleCreateMenuDescriptor
OleSaveToStream
CreateOleAdviseHolder
CreateDataCache
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
OleGetClipboard
StringFromGUID2
OleLoad
CoDisconnectObject
SetConvertStg
OleRegGetUserType
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateGuid
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
PropVariantClear
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
OleRun
CoCreateInstance
GetRunningObjectTable
OleIsRunning
CoGetMalloc
GetHGlobalFromILockBytes
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleSave

oleaut32

VariantClear
LoadRegTypeLi
SafeArrayGetDim
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
VarDateFromStr
VarBstrFromDate
VariantChangeTypeEx
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VariantChangeType
OleCreateFontIndirect
VarI4FromR8
VarI4FromR4
VarI4FromCy
SafeArrayGetLBound
SafeArrayGetUBound
SetErrorInfo
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
SysFreeString
SysAllocStringLen
SysReAllocStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetElemsize
SafeArrayLock
SafeArrayUnlock
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
OleCreatePropertyFrame
VarBstrCmp
DispCallFunc
RegisterTypeLi
OleLoadPicture
SafeArrayCreateVector
VariantInit
SysAllocString
VariantCopy
OleLoadPicturePath
GetErrorInfo
OleTranslateColor
LoadTypeLi
CreateErrorInfo
OleCreatePictureIndirect

oledlg

OleUIBusyW

urlmon

CreateURLMoniker
CreateAsyncBindCtx
RegisterBindStatusCallback
IsAsyncMoniker

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipDrawImageI
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHICONFromBitmap
GdipCreateBitmapFromHICON
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipCloneImage
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipSetClipRectI
GdipFillPieI
GdipFillRectangleI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCloneBrush
GdipCreateLineBrush
GdipCreateLineBrushI
GdipSetLineBlend
GdipCreatePath
GdipDeletePath
GdipAddPathEllipseI
GdipCreatePathGradientFromPath
GdipSetPathGradientCenterColor
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterPointI
GdipSetPathGradientBlend

winmm

PlaySoundW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

adde7b7c31b68f3ea9e2f850b90b9cd2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

a4:23:c0:04:a9:c7:70:15:42:30:e5:d2:71:be:06:54Certificate

Extended Key Usages

Key Usages

07:03:ff:ac:ee:5c:64:be:1a:c9:3d:b7:8f:1a:e8:0d:da:61:82Certificate

Extended Key Usages

Key Usages

44:e6:d6:b6:dd:47:a5:fc:87:2a:4c:cc:2f:60:84:98:9a:69:fa:98Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

gdiplus

winmm

oleacc

imm32

Exports

Exports

Sections

.text Size: 4.9MB - Virtual size: 4.9MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 76KB - Virtual size: 111KB

.rsrc Size: 649KB - Virtual size: 649KB

.reloc Size: 407KB - Virtual size: 406KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

a4:23:c0:04:a9:c7:70:15:42:30:e5:d2:71:be:06:54
Certificate

07:03:ff:ac:ee:5c:64:be:1a:c9:3d:b7:8f:1a:e8:0d:da:61:82
Certificate

44:e6:d6:b6:dd:47:a5:fc:87:2a:4c:cc:2f:60:84:98:9a:69:fa:98
Signer

.text
Size: 4.9MB - Virtual size: 4.9MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 76KB - Virtual size: 111KB

.rsrc
Size: 649KB - Virtual size: 649KB

.reloc
Size: 407KB - Virtual size: 406KB