5f1067ad165b081fd7880a2d286478e0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

5f1067ad165b081fd7880a2d286478e0_NeikiAnalytics
Size

884KB
MD5

5f1067ad165b081fd7880a2d286478e0
SHA1

2a5e9f77af41cfd8f3f1f242b3b9f3c56dd51702
SHA256

aad1775b6a4e2724ba23a3d9826c05bcb430ded5a016be968b7e0dcf7f9cbe49
SHA512

678bdca47b28ca2fd033e0c6ce8f9b90c7fb125192223c5a375b450f81c686bdeb7ad0650c413fd57079d5eebc5d12115074f12b11bc64fc77dfc29d8ade6b58
SSDEEP

24576:JLmxlKj+ufwL773MJA83cEQo//pQOiTGFxvNjeFfOBYV0A:V2Kyw4773Mh3KE/GbaFVNiFffCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f1067ad165b081fd7880a2d286478e0_NeikiAnalytics

Files

5f1067ad165b081fd7880a2d286478e0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

a57560274422d9137cb242e66371ec4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

atol
_getdrive
strstr
_chdir
_getcwd
strchr
_purecall
memset
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
srand
time
memcmp
memcpy
strcmp
strncmp
_chdrive
atoi
strcat
_mkdir
calloc
free
_strcmpi
strlen
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

CloseHandle
_llseek
OpenFile
_lread
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
CreateFileA
SetFilePointer
ReadFile
IsDBCSLeadByte
MultiByteToWideChar
WriteFile
WideCharToMultiByte
lstrcmpiA
GetVersion
FormatMessageA
GlobalAlloc
_lclose
GetLastError
GetDiskFreeSpaceA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
_lopen
GetWindowsDirectoryA
GetModuleHandleA
lstrcpynA
DeleteFileA
_lwrite
FreeResource
LockResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
GetTempPathA
GlobalLock
lstrcpyA
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalFree
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
lstrcatA
lstrlenA
SetErrorMode
DeviceIoControl
SystemTimeToFileTime
FileTimeToSystemTime
GetStartupInfoA

user32

SetCursor
EnableMenuItem
GetSystemMenu
SetWindowPos
GetSystemMetrics
SetWindowLongA
IsIconic
GetParent
SetFocus
MessageBeep
DestroyWindow
OemToCharA
CharNextA
CharToOemA
CharUpperA
CharPrevA
MessageBoxA
GetDesktopWindow
GetWindowRect
LoadStringW
LoadStringA
DrawTextA
CreateDialogParamW
CreateDialogParamA
DialogBoxParamW
DialogBoxParamA
GetClientRect
GetWindowLongA
EndPaint
BeginPaint
DrawFocusRect
LoadCursorA
DispatchMessageA
TranslateMessage
IsDialogMessageA
PeekMessageA
DestroyIcon
CreateIconIndirect
GetIconInfo
KillTimer
SetTimer
CreateWindowExA
LoadBitmapA
CheckDlgButton
PostMessageA
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
InvalidateRect
GetScrollRange
CharLowerA
GetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
wsprintfA
ShowWindow
EnableWindow
EndDialog
GetDlgItemTextA
GetDlgItem
SendMessageA
GetDC
SetRect
GetSysColor
FillRect
DefWindowProcA
SetWindowTextA
RegisterClassA
ReleaseDC

gdi32

SetBkColor
CreateSolidBrush
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetTextMetricsA
ExtTextOutA
SetTextColor
GetBkColor
BitBlt
SetBkMode
GetStockObject
DeleteObject
DeleteDC

comdlg32

GetSaveFileNameA

mpr

WNetGetUserA
WNetConnectionDialog

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a57560274422d9137cb242e66371ec4c

Headers

File Characteristics

Imports

crtdll

kernel32

user32

gdi32

comdlg32

mpr

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 19KB - Virtual size: 23KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 19KB - Virtual size: 23KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 5KB - Virtual size: 4KB