44bee04d789a73bfdc560f3d92fd26d0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

44bee04d789a73bfdc560f3d92fd26d0_NeikiAnalytics
Size

2.0MB
MD5

44bee04d789a73bfdc560f3d92fd26d0
SHA1

3f55bacbd3705702c31eb4c48ba1955e58f68672
SHA256

c0d9318ff90650bbf32d23e31e26c0f3a6b8c32dfa061f601622e358b1619f69
SHA512

f2b07d06cb88bfc037a36062d53e22985217491682aa367a6ff4c4866e5218f71a85e1e6e78990e731e3333bb24f17544c45001431fc770dfc00a2d99a1b135d
SSDEEP

24576:Wn1Ww0UrC0Z+y4pkWivhFDEZDVdRj+Mg/+Vyv0FF1yqTODDOR2GlQffBFT4sEphV:y1ZTZ+EhJwVdR+M7VBpYvyvpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bee04d789a73bfdc560f3d92fd26d0_NeikiAnalytics

Files

44bee04d789a73bfdc560f3d92fd26d0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

ddb5ca91d312e4a182cab37c26d97d8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetDateFormatW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenFileMappingW
GetCurrentThreadId
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ResetEvent
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetCurrentThread
GetCurrentProcessId
GetCurrentDirectoryW
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetCommandLineW
GetACP
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
ExitProcess
EnumSystemLocalesW
DeleteCriticalSection
DebugBreak
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetDriveTypeW
LCMapStringA
OpenProcess

user32

OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetFocus
SetMenuItemInfoW
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnregisterClassW
UpdateWindow
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
InvalidateRect
OffsetRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollInfo
GetParent
GetMessageW
GetMenu
GetKeyState
GetIconInfo
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetWindowThreadProcessId
GetForegroundWindow
AdjustWindowRectEx
GetCapture
GetActiveWindow
FlashWindow
FillRect
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawIcon
DrawFocusRect
MoveWindow
MessageBoxW
MapWindowPoints
IntersectRect
LoadStringW
BeginPaint
CallWindowProcW
CharNextW
CharUpperW
CheckMenuRadioItem
CloseClipboard
CopyRect
CreateDialogParamW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcW
CreateWindowExW
DrawTextExA

gdi32

GetDIBits
GetObjectW
GetStockObject
Polygon
RealizePalette
GetDIBColorTable
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBits
SetStretchBltMode
SetTextColor
SetViewportOrgEx
TextOutW
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontW
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectClipRgn
StartPage

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
AdjustTokenPrivileges

shell32

Shell_NotifyIconW
ExtractIconW
CommandLineToArgvW
ShellExecuteW

ole32

CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoCreateGuid

Sections

.text
Size: 760KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vcp1204
Size: 862KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ddb5ca91d312e4a182cab37c26d97d8e

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 760KB - Virtual size: 757KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 376KB - Virtual size: 376KB

.vcp1204 Size: 862KB - Virtual size: 864KB

.text
Size: 760KB - Virtual size: 757KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 376KB - Virtual size: 376KB

.vcp1204
Size: 862KB - Virtual size: 864KB