d25f521058ba9eb740dcae52de10a060_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

d25f521058ba9eb740dcae52de10a060_NeikiAnalytics
Size

580KB
MD5

d25f521058ba9eb740dcae52de10a060
SHA1

3e1b24c38e47b4f70acd80d3d18d76bc714150fc
SHA256

961a5163a05d6e3e5c1306eb46b95d492bd7d87cede692ed29dfb173f37d7d20
SHA512

e8ed82e4802943c1b33fad22945a14d2220b03cf1bc54da4b7c21b63dbe95860e91b98a5460be61f3e3b0b0d95b19a72b37e300ec31a3f0d62a44f0ecbbb67c7
SSDEEP

12288:zC1fIIl8mi47a0aUOZnCVq6HCjNf3gCvCh+gziZWM:zo247/a9ZnYq/yCvCsgeAM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d25f521058ba9eb740dcae52de10a060_NeikiAnalytics

Files

d25f521058ba9eb740dcae52de10a060_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

5fee50288aa042b63b38bcb450004734

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

update.pdb

Imports

kernel32

CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
TryEnterCriticalSection
Sleep
WriteFile
SetFilePointer
GetTempFileNameW
GetCommandLineW
MoveFileExW
GetTickCount
IsBadReadPtr
TerminateThread
IsBadWritePtr
GetFileAttributesW
SystemTimeToFileTime
GetCurrentDirectoryW
SetFileTime
LocalFileTimeToFileTime
SetEndOfFile
FlushFileBuffers
GetSystemTimeAsFileTime
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
DeleteCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
SetHandleCount
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
CreateThread
ResumeThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
InterlockedExchange
LocalAlloc
GlobalLock
GlobalUnlock
GetSystemTime
CreateDirectoryW
GlobalFree
CopyFileW
GlobalAlloc
GetSystemDirectoryW
GetTempPathW
DeleteFileW
GetCurrentProcessId
GetModuleFileNameW
GetVersionExW
lstrlenA
RaiseException
GetLastError
FreeResource
MultiByteToWideChar
GetCurrentThreadId
LeaveCriticalSection
CreateFileW
GetFileSize
GetWindowsDirectoryW
ReadFile
lstrlenW
OutputDebugStringW
EnterCriticalSection
FindResourceExW
CloseHandle
SetLastError
FlushInstructionCache
GetLocalTime
GetCurrentProcess
LoadResource
FreeLibrary
LockResource
SizeofResource
FindResourceW
LoadLibraryW
GetModuleHandleW
WideCharToMultiByte
GetProcAddress
InitializeCriticalSection
GetStringTypeA

user32

SetCursor
ReleaseDC
SetTimer
LoadMenuW
GetWindowLongW
LoadCursorW
DrawFrameControl
EqualRect
SetRect
CallWindowProcW
DrawIconEx
RegisterWindowMessageW
IsWindowEnabled
LoadBitmapW
SendMessageA
DestroyMenu
MonitorFromPoint
IsWindowVisible
PostQuitMessage
GetActiveWindow
DispatchMessageW
TrackPopupMenu
GetSubMenu
LoadImageW
GetNextDlgTabItem
InvalidateRect
KillTimer
DefWindowProcW
ShowWindow
SetRectEmpty
UpdateLayeredWindow
DrawTextW
IsMenu
SendMessageW
PostThreadMessageW
ClientToScreen
SetWindowPos
GetParent
GetCursorPos
OffsetRect
MapWindowPoints
GetClientRect
EndPaint
GetClassInfoExW
GetWindow
SetWindowLongW
SetCapture
BeginPaint
MoveWindow
LoadIconW
ReleaseCapture
SystemParametersInfoW
CreateWindowExW
InflateRect
CopyRect
GetDesktopWindow
SetWindowRgn
DestroyIcon
GetDC
MonitorFromWindow
ScreenToClient
GetMonitorInfoW
GetDlgItem
PtInRect
IsWindow
GetDlgCtrlID
SetFocus
RegisterClassExW
GetWindowRect
DestroyWindow
wsprintfW
GetWindowThreadProcessId
GetForegroundWindow
GetFocus
IsChild
IsDialogMessageW
EnableWindow
UnregisterClassA
AttachThreadInput
PostMessageW
SetForegroundWindow
SetActiveWindow
PeekMessageW
GetMessageW
TranslateMessage
IntersectRect

gdi32

CombineRgn
GetCurrentObject
CreateFontIndirectW
CreateRectRgn
SelectClipRgn
LineTo
MoveToEx
SelectObject
CreatePen
CreateDIBSection
CreateRoundRectRgn
DeleteObject
CreateCompatibleDC
GetTextExtentPoint32W
GetViewportOrgEx
GetClipRgn
Rectangle
ExtSelectClipRgn
SetViewportOrgEx
BitBlt
CreateRectRgnIndirect
ExtTextOutW
SetBkColor
TextOutW
RectInRegion
SetTextColor
CreateBitmap
StretchBlt
CreateCompatibleBitmap
SetStretchBltMode
OffsetRgn
SaveDC
RoundRect
SetBkMode
SetRectRgn
RestoreDC
GetTextColor
DeleteDC
GetObjectW
GetStockObject

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHCreateDirectoryExW
Shell_NotifyIconW
CommandLineToArgvW
SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW

ole32

CreateStreamOnHGlobal

shlwapi

StrToIntA
PathAppendW
PathRemoveFileSpecW
PathAddBackslashW
PathFileExistsW
StrToIntW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipImageRotateFlip
GdipLoadImageFromStream
GdipCreateHBITMAPFromBitmap
GdipDrawImagePointsRectI
GdipCreatePath
GdiplusShutdown
GdipCreateBitmapFromStream
GdipGraphicsClear
GdipNewPrivateFontCollection
GdipDeletePath
GdipFillRectangleI
GdipDeletePrivateFontCollection
GdipSetCompositingQuality
GdiplusStartup
GdipAddPathPieI
GdipPrivateAddFontFile
GdipClosePathFigure
GdipGetFontCollectionFamilyCount
GdipDrawImageRectRect
GdipDeletePen
GdipCreateStringFormat
GdipDrawImageRectRectI
GdipDeleteFontFamily
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipDeleteStringFormat
GdipAddPathRectangleI
GdipSetPenEndCap
GdipCreateImageAttributes
GdipGetImageHeight
GdipSetPenStartCap
GdipDrawLinesI
GdipSetStringFormatFlags
GdipDrawImageRectI
GdipGetImageWidth
GdipSetPenMode
GdipCreateBitmapFromScan0
GdipSetStringFormatAlign
GdipDisposeImage
GdipSetPenDashStyle
GdipSetSmoothingMode
GdipFree
GdipSetStringFormatLineAlign
GdipCloneImage
GdipSetClipPath
GdipDrawLine
GdipGetImageGraphicsContext
GdipCloneBrush
GdipSetStringFormatTrimming
GdipSetInterpolationMode
GdipAlloc
GdipCreatePen1
GdipSetImageAttributesColorMatrix
GdipLoadImageFromFile
GdipSetPixelOffsetMode
GdipDeleteBrush
GdipSetTextRenderingHint
GdipDrawRectangleI
GdipFillRectangle
GdipGetFamily
GdipDrawString
GdipAddPathArcI
GdipDeleteGraphics
GdipTranslateWorldTransform
GdipDrawPath
GdipCreateFromHDC
GdipRotateWorldTransform
GdipAddPathStringI
GdipCreateFont
GdipResetWorldTransform
GdipMeasureString
GdipGetFontSize
GdipDeleteFont
GdipCreateSolidFill
GdipDrawImageI
GdipCreateFontFromLogfontW
GdipDisposeImageAttributes
GdipFillPath

Sections

.text
Size: 352KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5fee50288aa042b63b38bcb450004734

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 352KB - Virtual size: 349KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 12KB - Virtual size: 21KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 352KB - Virtual size: 349KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 124KB - Virtual size: 124KB