General

Malware Config

Signatures

Files

• 3494a626c0aca2dfe5920be307bd75abb4dc958ff2cfc952a9bdfb084d616de9_NeikiAnalytics.exe

  .dll windows:5 windows x86 arch:x86

  ca1c7853b29bed02bab5cfa77f707413

  
  

  Code Sign

  16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  31-12-2015 00:00

  Not After

  09-07-2019 18:40

  Subject

  CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  24-08-2011 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  d0:69:2f:24:94:26:ef:cd:63:7d:c8:ad:31:f2:6a:72

  Certificate

  Issuer

  CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  08-07-2014 00:00

  Not After

  07-07-2017 23:59

  Subject

  CN=Andrey Borodin,O=Andrey Borodin,POSTALCODE=394088,STREET=An. Ovseenko 23a,L=Voronezh,ST=Voronezh,C=RU

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  bf:d6:08:64:1c:0d:ec:11:1a:f4:2c:a5:82:b7:25:03:9f:cf:5a:34

  Signer

  Actual PE Digest

  bf:d6:08:64:1c:0d:ec:11:1a:f4:2c:a5:82:b7:25:03:9f:cf:5a:34

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcpy

  DeleteCriticalSection

  TlsSetValue

  lstrlenW

  Sleep

  user32

  GetKeyboardType

  WindowFromPoint

  advapi32

  RegQueryValueExA

  RegSetValueExA

  oleaut32

  SysFreeString

  SafeArrayPtrOfIndex

  GetErrorInfo

  version

  VerQueryValueA

  gdi32

  UnrealizeObject

  ole32

  CreateStreamOnHGlobal

  comctl32

  ImageList_SetIconSize

  imm32

  ImmSetCompositionWindow

  Exports

  Exports

  ?VideoWindow_MoveWindowSeries@ProgDvbEngine@@YG_N_N0@Z

  InternalDebug_SetThreadName

  _AV_AudioProcessor_Equalizer_SetBands@4

  _AV_AudioProcessor_IsPressent@0

  _AV_AudioProcessor_SetSettings@4

  _AV_AudioProcessor_Spectrum_Enable@4

  _AV_AudioProcessor_Spectrum_Get@4

  _AV_EnumDsFilters@4

  _AV_GetBufferInfo@4

  _AV_GetChannelStatus@8

  _AV_GetFilterList@8

  _AV_GetMediaProperties@8

  _AV_GetRenderSupportedCaps@4

  _AV_GetSettings@8

  _AV_GetVolume@8

  _AV_SetChannelSubStream@12

  _AV_SetDefaultLngOptions@4

  _AV_SetPictureColorParams2@4

  _AV_SetSettings@8

  _AV_SetSyncRecordMode@4

  _AV_SetVolume@8

  _AV_ShowFilterPropertyDlg@4

  _Debug_GetInputTrafficInfo@8

  _Debug_GetLastErrorText@8

  _Debug_ShowFilerManagerTree@8

  _Device_BlindScannerStep@4

  _Device_CI_Answer@4

  _Device_CI_CloseMenu@4

  _Device_CI_GetCaName@12

  _Device_CI_OpenMenu@4

  _Device_Diseq_DoCommand@4

  _Device_Diseq_GetUsalsSettings@4

  _Device_Diseq_SetUsalsSettings@4

  _Device_GetAttribute@8

  _Device_GetDetectList@4

  _Device_GetList@8

  _Device_GetMisInfo@4

  _Device_GetSignalState@4

  _Device_RFScan@4

  _Device_SetList@8

  _Device_ShowDialog@4

  _Engine_About@4

  _Engine_ChangingApplicationState@4

  _Engine_Finalization@0

  _Engine_GetBaseDialogStruct@4

  _Engine_GetCurrentChannel@4

  _Engine_GetDeviceOfGraph@8

  _Engine_GetOptions@4

  _Engine_GetPluginsMenu@0

  _Engine_GetSubChannels@8

  _Engine_IsStarted@0

  _Engine_Preinitialization@4

  _Engine_SendModuleMessage@12

  _Engine_SetBaseDialogStruct@4

  _Engine_SetChannel@4

  _Engine_SetOptions@4

  _Engine_SetTransponder@4

  _Engine_Start@4

  _Engine_Stop@0

  _Module_GetAttribute@8

  _Module_GetList@8

  _Module_SetList@12

  _Module_ShowDialog@4

  _Mosaic_RequestImages@4

  _OSD_AddWindow@8

  _OSD_DeleteWindow@4

  _OSD_GetMaxWindowCount@4

  _OSD_GetSettings@8

  _OSD_SetBitmap@16

  _OSD_SetSettings@4

  _OSD_SetWindowVisible@8

  _Playback_GetChannelFromTsFile@0

  _Playback_GetPlaybackFileName@4

  _Playback_IsPaused@4

  _Playback_Nav_ChangePosition@12

  _Playback_Nav_GetTimeShiftStatus@4

  _Playback_Pause@0

  _Playback_Play@4

  _Playback_Stop@0

  _Record_GetCurrentDirectory@8

  _Record_GetGraphRecordPossibility@4

  _Record_GetSettings@4

  _Record_GetStatus@4

  _Record_GetTransportPossibility@4

  _Record_IsRecording@4

  _Record_SetClipParams@8

  _Record_SetCurrentDirectory@4

  _Record_SetSettings@4

  _Record_Start@4

  _Record_Stop@8

  _RemoteControl_GetSettings@8

  _RemoteControl_SetSettings@4

  _Scanner_CreateEnvironment@4

  _Scanner_DestroyEnvironment@4

  _Scanner_PlayTimePatParser_ScanNewChannels@4

  _Scanner_PlayTimePmtParser_UpdateCurrentChannel@4

  _Scanner_RequestChannelList@4

  _Scanner_ScanTrasponder@12

  _Scanner_StopProccessesBeforScanner@4

  _Scanner_Terminated@4

  _Stream_Close@4

  _Stream_Open@8

  _Teletext_GetData@8

  _Teletext_SetSettings@8

  _VideoWindow_CloseGraph@4

  _VideoWindow_Create@4

  _VideoWindow_CreateScreenShot@12

  _VideoWindow_EnumGraphs@4

  _VideoWindow_Get3DFormat@4

  _VideoWindow_GetIcon@12

  _VideoWindow_GetLetterBox@4

  _VideoWindow_GetSetParallax@4

  _VideoWindow_GetVideoRatio@4

  _VideoWindow_GetVideoZoom@4

  _VideoWindow_MoveWindow@8

  _VideoWindow_MultiChannelRendering@4

  _VideoWindow_ParentControlDialogMode@8

  _VideoWindow_SelectGraph@4

  _VideoWindow_Set3DFormat@8

  _VideoWindow_SetLetterBox@8

  _VideoWindow_SetVideoRatio@8

  _VideoWindow_SetVideoZoom@8

  Sections

  Size: 610KB - Virtual size: 2.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 20KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  wtgqgyvu

  Size: 4.2MB - Virtual size: 4.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  mqvzyigd

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE