555675f884425ebf6f5a37233a5d1530_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

555675f884425ebf6f5a37233a5d1530_NeikiAnalytics
Size

124KB
MD5

555675f884425ebf6f5a37233a5d1530
SHA1

9ba3d58d0657c5f61fd67a110a9dcbfdaf890582
SHA256

a856eb759ec774d738a4e1ed05fa1d39873208fddefb0bf7d5ab408b32cdf7c1
SHA512

0b6e187aec9a2e9fca62adbe6570835f290398323e1603230d98965aa4afc5141f6565c176ce991c5d9f1707ae6a5f274ccec972e2ae0dd60e4eb1a1a589de3b
SSDEEP

1536:FKfAVA1U6u3qSKpcskq0wgnlrtLhnSnzPJSRylXlpo2PTtkDsZVtxb2zw:CAEhuhKlqnRtFnESEo2PTtkDstlb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
555675f884425ebf6f5a37233a5d1530_NeikiAnalytics

Files

555675f884425ebf6f5a37233a5d1530_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

25bb495f520d9c0faa30a11b9dbb77ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dlaapi_w

TfsGetConfigString
DLAOperationStatus
TfsPnpDevice
TfsCancelCallback
TfsGetDriveStatus2
TfsInitInstance
TfsInitCallbacks1
TfsTermInstance
TfsGetFileSystemStatus
TfsGetIniFileName
TfsGetDriveClientFolder
DLAOperationStart
DLAOperationFree
TfsGetUserNotificationCode
TfsCallOnUserNotification
TfsGetDriveCaps
TfsCommand
TfsProcessEjectRequestNotify

dlacresw

GetResourceHandle

kernel32

GetCurrentProcess
IsBadCodePtr
SetSystemPowerState
IsBadReadPtr
lstrlenA
lstrcpyA
lstrcmpiA
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
CreateThread
SetEvent
WaitForMultipleObjects
GetPrivateProfileStringA
WriteFile
ReadFile
GetTempFileNameA
GetTempPathA
LocalAlloc
UnmapViewOfFile
lstrcatA
GetProfileStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapReAlloc
HeapSize
VirtualAlloc
SetFilePointer
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
SetEndOfFile
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
MultiByteToWideChar
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
FormatMessageA
LocalFree
FreeLibrary
GetVersionExA
CreateMutexA
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
GetTickCount
GetPrivateProfileIntA
DeviceIoControl
SetErrorMode
CreateFileA
lstrcpynA
GetDriveTypeA
GetVolumeInformationA
CreateEventA
WaitForSingleObject
CloseHandle
GetLastError
GetFileSize

user32

EnableMenuItem
GetSystemMenu
GetWindowLongA
GetDesktopWindow
SetWindowLongA
EnableWindow
IsWindow
TranslateMessage
GetWindowRect
ScreenToClient
GetParent
MoveWindow
GetClientRect
IsZoomed
IsIconic
FillRect
InvalidateRect
CheckDlgButton
SetDlgItemTextA
GetDlgItemTextA
SetFocus
ExitWindowsEx
MessageBoxA
LoadStringA
RegisterClipboardFormatA
GetActiveWindow
CreateDialogParamA
SetWindowTextA
SetWindowPos
SetForegroundWindow
SetActiveWindow
GetMessageA
PeekMessageA
IsDialogMessageA
DispatchMessageA
LoadCursorA
SetCursor
ShowWindow
EndDialog
SetTimer
CharUpperA
KillTimer
PostQuitMessage
SendMessageA
DefWindowProcA
FindWindowA
RegisterClassA
CreateWindowExA
DestroyWindow
PostMessageA
wsprintfA
GetDlgItem
GetWindowTextA
IsDlgButtonChecked
BroadcastSystemMessage
DialogBoxParamA

gdi32

StretchBlt
DeleteObject
CreateCompatibleDC
SelectObject
SetBkColor
CreateBitmap
SetTextColor
DeleteDC

advapi32

AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetUserNameA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
RegEnumValueA
RegDeleteValueA
RegNotifyChangeKeyValue
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
LookupPrivilegeValueA

shell32

DragQueryFileA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

ole32

CoInitialize
CoUninitialize
CoRevokeClassObject
CoGetMalloc
CoCreateInstance
ReleaseStgMedium
CoRegisterClassObject

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25bb495f520d9c0faa30a11b9dbb77ed

Headers

File Characteristics

Imports

dlaapi_w

dlacresw

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 20KB - Virtual size: 25KB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 20KB - Virtual size: 25KB

.rsrc
Size: 28KB - Virtual size: 26KB