b6a81b246a1f8581746ef343fb78c0dbadbdf71d12475a2506b8d2721804267b_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b6a81b246a1f8581746ef343fb78c0dbadbdf71d12475a2506b8d2721804267b_NeikiAnalytics.exe
Size

272KB
MD5

194c8bf322f37638df9769aaf43542c0
SHA1

5ec0ef8a5f91e00a6223c7bbd55c5269664467f4
SHA256

b6a81b246a1f8581746ef343fb78c0dbadbdf71d12475a2506b8d2721804267b
SHA512

0451851f6f8dfb2071c41f1ba399d525fd67b9473ac34b7114701790859f66c67be2dd365cb4fad742b67511475c058b8e96280240a7e1133ba991eccc0d4966
SSDEEP

6144:+YL07nEMyvaBTX8hF0/DE9GP6xYTKZKntYV:+YLInEPaBTX847q+uYuou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6a81b246a1f8581746ef343fb78c0dbadbdf71d12475a2506b8d2721804267b_NeikiAnalytics.exe

Files

b6a81b246a1f8581746ef343fb78c0dbadbdf71d12475a2506b8d2721804267b_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

0ff3c99846de40578cfb1e6819bb8a18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

opengl32

glDrawBuffer
wglMakeCurrent
wglCreateContext
wglShareLists
wglDeleteContext
wglGetCurrentDC
glPopClientAttrib
glPushClientAttrib
wglGetCurrentContext
wglGetProcAddress
glFrontFace
glDepthFunc
glTexSubImage2D
glDepthRange
glViewport
glOrtho
glHint
glLineWidth
glColor4d
glBegin
glTexCoord2d
glVertex3d
glEnd
glPushAttrib
glRasterPos2i
glDrawPixels
glPopAttrib
glReadPixels
glLoadIdentity
glDeleteTextures
glGetIntegerv
glTexEnvi
glPixelStorei
glGenTextures
glTexImage2D
glBindTexture
glTexParameteri
glBlendFunc
glPopMatrix
glPushMatrix
glMultMatrixd
glMatrixMode
glLoadMatrixd
glColor4f
glFogi
glFogf
glFogfv
glDisable
glDepthMask
glEnable
glPointSize
glDrawArrays
glDrawElements
glEnableClientState
glDisableClientState
glVertexPointer
glColorPointer
glTexCoordPointer
glGetDoublev
glClearColor
glClear
glGetError
glGetString

glu32

gluOrtho2D
gluBuild2DMipmaps
gluErrorString
gluScaleImage

kernel32

GetConsoleCP
FlushFileBuffers
GetStringTypeW
LCMapStringW
SetEnvironmentVariableA
CompareStringW
MultiByteToWideChar
HeapQueryInformation
HeapSize
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
IsValidCodePage
GetCPInfo
GetOEMCP
GetConsoleMode
WideCharToMultiByte
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
GetLastError
OutputDebugStringA
WriteFile
GetStdHandle
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleW
GetProcAddress
IsBadReadPtr
HeapValidate
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetCurrentThreadId
RtlUnwind
RaiseException
SetFilePointer
CloseHandle
SetStdHandle
GetACP
GetProcessHeap
HeapAlloc
HeapFree
lstrcpyA
lstrlenA
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW

Exports

Exports

AllocateIndexBuffer
AllocateVertexBuffer
BindRenderTexture
BindRenderTextureCube
BindShader
ClearDepth
ClearScreen
ConfigureFog
CopyLuminanceFromScreen
CopyLuminanceIntoTexture
CreateLuminanceTexture
DeleteShader
DeviceLost
DeviceReset
DisableBlending
DisablePointSprites
DisableTexture
DrawAALine
DrawAALines
DrawPoints
DrawQuads
DrawStrip
Enable3DTexture
EnableBackfaceCulling
EnableBlending
EnableDepthReads
EnableDepthWrites
EnableFog
EnableLighting
EnablePointSprites
EnableTexture
EnableTexture2D
EnableTexture3D
EndOcclusionQuery
GetDepthRange
GetFOV
GetFrustumClipSpace
GetFrustumWorldSpace
GetIndices
GetModelviewMatrix
GetNativeTexture
GetOcclusionQueryResult
GetPixels
GetProjectionMatrix
GetRenderTextureCubeTextureHandle
GetRenderTextureTextureHandle
GetShaderProgramObject
GetTextureMatrix
GetVertexBuffer
GetVertices
GetViewport
HasFloatTextures
HasPointSprites
HasQuads
InitRenderTarget
InitRenderTexture
InitRenderTextureCube
Load3DTexture
Load3DTextureLA
Load3DTextureRGB
LoadFloatTexture
LoadFloatTextureRGB
LoadShaderFromFile
LoadShaderFromSource
LoadTexture
LoadTextureFromFile
LockIndexBuffer
LockVertexBuffer
MakeRenderTargetCurrent
MakeRenderTextureCubeCurrent
MakeRenderTextureCurrent
MultiplyModelviewMatrix
PopAllState
PopTransforms
PushAllState
PushTransforms
ReleaseIndexBuffer
ReleaseRenderTarget
ReleaseRenderTexture
ReleaseRenderTextureCube
ReleaseTexture
ReleaseVertexBuffer
RestoreRenderTarget
Set2DOrthoMatrix
SetConstantMatrix4
SetConstantVector4
SetContext
SetCurrentColor
SetDefaultState
SetDepthRange
SetEnvironment
SetIndexBuffer
SetModelviewMatrix
SetOrthoMatrix
SetPixels
SetProjectionMatrix
SetTextureMatrix
SetUserShaders
SetVertexBuffer
SetViewport
ShutdownShaderSystem
StartOcclusionQuery
SubLoad3DTextureLA
UnbindShader
UnlockIndexBuffer
UnlockVertexBuffer
UnsetIndexBuffer
UnsetVertexBuffer
UpdateVertexBuffer

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ff3c99846de40578cfb1e6819bb8a18

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

glu32

kernel32

Exports

Exports

Sections

.text Size: 185KB - Virtual size: 184KB

.rdata Size: 62KB - Virtual size: 62KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 185KB - Virtual size: 184KB

.rdata
Size: 62KB - Virtual size: 62KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 17KB - Virtual size: 17KB