2262e632640fcf1f19ecd6b6d41193f0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

2262e632640fcf1f19ecd6b6d41193f0_NeikiAnalytics
Size

817KB
MD5

2262e632640fcf1f19ecd6b6d41193f0
SHA1

bf9effd982a7aaa2653c626aa1580e0cd50a49d5
SHA256

236213aa6055c0a81cedbb1c48f587849376939dfbadfb0a66a3b570f0c57682
SHA512

fe1672fcf58d02c6be4e6820dcea16bbf30e442cbf118d781f73359d7e62db716956f044ea0d047aa53204c2b4484c15f1f0c181a6fb22e79c4193eb91f3a2d4
SSDEEP

24576:O1dkhWIlbEHVJpG31qVvk0jSdZ1dOd4eVna:+dkhWISHv2lDec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2262e632640fcf1f19ecd6b6d41193f0_NeikiAnalytics

Files

2262e632640fcf1f19ecd6b6d41193f0_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

9c51910ad3b678a3f292facd024d37c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
GetACP
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadFile
ReadConsoleW
CreateFileW
WriteConsoleW
RtlUnwind
EncodePointer
RaiseException
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetOEMCP
LCMapStringW
CompareStringW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
HeapFree
HeapAlloc
SetLastError
GetProcAddress
GetModuleHandleExW
FreeLibrary
GetModuleFileNameW
WriteFile
GetStdHandle
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetModuleHandleW
GetLastError
ExitProcess
CreateSemaphoreW
HeapSize
GetTimeZoneInformation
GetFullPathNameW
GetFileAttributesExW
DecodePointer
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
WaitForSingleObject
CreateThread
InitializeCriticalSection
DuplicateHandle
CreatePipe
CreateProcessW
GetFileSize
SetFilePointer
SetEndOfFile
LoadLibraryW
MulDiv
DeleteFileW
Sleep
CreateDirectoryW
SetFileAttributesW
FindFirstFileW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SleepEx
VerSetConditionMask
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
GetTickCount
ExpandEnvironmentStringsA
FormatMessageA
CreateFileA
GetFileSizeEx
RegisterWaitForSingleObject
UnregisterWait
GetDriveTypeW
CloseHandle

shell32

Shell_NotifyIconW
ShellExecuteExW

ole32

OleUninitialize
OleInitialize
RevokeDragDrop

ws2_32

WSACleanup
WSAStartup
htons
recv
ntohl
gethostname
freeaddrinfo
getaddrinfo
ioctlsocket
listen
htonl
accept
select
__WSAFDIsSet
WSAIoctl
WSASetLastError
setsockopt
ntohs
send
getsockopt
getsockname
getpeername
connect
bind
socket
WSAGetLastError
closesocket

crypt32

CertAddCertificateContextToStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA

winmm

timeBeginPeriod

gdiplus

GdipDeleteMatrix
GdipFree
GdipDeletePath
GdipDeleteStringFormat
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePen

user32

EmptyClipboard
CharLowerW
CallWindowProcW
GetMenu
GetSubMenu
GetMenuItemCount
ModifyMenuW
GetMenuItemInfoW
SetMenuItemInfoW
DrawTextW
DrawStateW
GetDC
ReleaseDC
SetPropW
GetPropW
GetSysColor
GetSysColorBrush
FillRect
FrameRect
SetWindowLongW
DrawIconEx
GetIconInfo
SystemParametersInfoW
SetMenu
DestroyMenu
AppendMenuW
CreatePopupMenu
SendMessageW
DestroyWindow
SetActiveWindow
GetWindow
LoadCursorW
LoadIconW
DestroyIcon
RegisterClassW
UnregisterClassW
CreateWindowExW
ShowWindow
SetWindowPos
CreateAcceleratorTableW
AdjustWindowRectEx
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetActiveWindow
MsgWaitForMultipleObjects
TranslateAcceleratorW
PostMessageW
DefWindowProcW
SetFocus
GetFocus
DestroyAcceleratorTable
TrackPopupMenu
SetForegroundWindow
RemovePropW
GetCursorPos
SetRect
GetWindowLongW
GetParent
EnumChildWindows
DefFrameProcW
GetSystemMetrics
GetWindowRect
IsChild
IsWindowVisible
GetKeyState
IsWindowEnabled
GetClassNameW
GetWindowThreadProcessId
CreateIconIndirect
RegisterWindowMessageW
OpenClipboard
CloseClipboard
GetClipboardData
CreateIconFromResource
CreateIconFromResourceEx

gdi32

GetStockObject
GetTextExtentPoint32W
GetPixel
SelectObject
SetBkColor
GetObjectType
SetPixel
SetTextColor
GetObjectW
MoveToEx
GetDeviceCaps
StretchDIBits
StretchBlt
SetStretchBltMode
SetBrushOrgEx
CreateDIBSection
CreateDCW
CreateBitmap
GetDIBits
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontIndirectW
SetBkMode
CreateCompatibleDC
CreateCompatibleBitmap
LineTo
BitBlt

advapi32

CryptCreateHash
CryptReleaseContext
CryptDestroyHash
CryptHashData
CryptAcquireContextA
CryptGenRandom
CryptGetHashParam

comctl32

InitCommonControlsEx

Sections

.code
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c51910ad3b678a3f292facd024d37c5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ole32

ws2_32

crypt32

winmm

gdiplus

user32

gdi32

advapi32

comctl32

Sections

.code Size: 4KB - Virtual size: 3KB

.text Size: 568KB - Virtual size: 567KB

.rdata Size: 120KB - Virtual size: 120KB

.data Size: 25KB - Virtual size: 30KB

.rsrc Size: 77KB - Virtual size: 76KB

.reloc Size: 21KB - Virtual size: 20KB

.code
Size: 4KB - Virtual size: 3KB

.text
Size: 568KB - Virtual size: 567KB

.rdata
Size: 120KB - Virtual size: 120KB

.data
Size: 25KB - Virtual size: 30KB

.rsrc
Size: 77KB - Virtual size: 76KB

.reloc
Size: 21KB - Virtual size: 20KB