b252fe1ff0bcfb9bc0e365e00232d370_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

b252fe1ff0bcfb9bc0e365e00232d370_NeikiAnalytics
Size

1.9MB
MD5

b252fe1ff0bcfb9bc0e365e00232d370
SHA1

4927f8db61a9249aaaf166dcaea1db94bbcd7262
SHA256

df35f22df6bd54a03674da5971627af5786343aa09ca56a271760317c035d550
SHA512

a85ebd7daadda5186dfad893eaad9bfcd6aa1c7eb6f1bbebe7609dfb2b5b33fbec204001f0aac6d659e9101a41119138dc457965b00485d62b9c7932c8d19f93
SSDEEP

24576:RbPuYJsahDZiW8ialsLQXOS/MC7APEcDMY7BPdN1Hg3wDI4YRKFMiQjLF+GOUIMN:FP7NDkvpskONEoEgt6Bao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b252fe1ff0bcfb9bc0e365e00232d370_NeikiAnalytics

Files

b252fe1ff0bcfb9bc0e365e00232d370_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

d0107d04e9bb349db08e8f5247dfcab2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
MulDiv
GetCurrentDirectoryW
OpenFileMappingW
OpenProcess
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ResetEvent
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetCommandLineW
GetACP
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
ExitProcess
EnumSystemLocalesW
DeleteCriticalSection
DebugBreak
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetLocalTime
GetDriveTypeA
GetTimeZoneInformation
LCMapStringA
MultiByteToWideChar

user32

OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetFocus
SetMenuItemInfoW
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnregisterClassW
UpdateWindow
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
InvalidateRect
OffsetRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollInfo
GetParent
GetMessageW
GetMenu
GetKeyState
GetIconInfo
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
AdjustWindowRectEx
BeginPaint
CallWindowProcW
GetClientRect
GetClassNameW
GetCapture
GetActiveWindow
FlashWindow
FillRect
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
MoveWindow
MessageBoxW
MapWindowPoints
IntersectRect
LoadStringW
CharNextW
CharUpperW
CheckMenuRadioItem
CloseClipboard
CopyRect
CreateDialogParamW
CreateWindowExW
DefWindowProcW
DrawIcon
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DrawTextExA

gdi32

GetObjectW
GetStockObject
Polygon
RealizePalette
GetDIBits
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBits
SetStretchBltMode
SetTextColor
SetViewportOrgEx
TextOutW
GetDIBColorTable
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontW
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
SelectClipRgn
CreateCompatibleBitmap

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
AdjustTokenPrivileges

shell32

Shell_NotifyIconW
ExtractIconW
CommandLineToArgvW
ShellExecuteW

ole32

CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoCreateGuid

Sections

.text
Size: 760KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vcp1206
Size: 990KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0107d04e9bb349db08e8f5247dfcab2

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 760KB - Virtual size: 757KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 200KB - Virtual size: 200KB

.vcp1206 Size: 990KB - Virtual size: 992KB

.text
Size: 760KB - Virtual size: 757KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 200KB - Virtual size: 200KB

.vcp1206
Size: 990KB - Virtual size: 992KB