03b89c213f2d522dfc1632d3a3830f50_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

03b89c213f2d522dfc1632d3a3830f50_NeikiAnalytics.exe
Size

188KB
MD5

03b89c213f2d522dfc1632d3a3830f50
SHA1

2b3d03d1472c4c0f6cd7395bc661791b7e49a7eb
SHA256

0dfdb41fa0bf747a00dfb755edb51ed11c4503950aef29b06be996359fc80a13
SHA512

adbd90841873ed1fc437be1d85df9e718cf432f14998016565e4cd15aad7278b46e3622023f88150222b8382c8f71905e3f0ad4fef435095ac190d661f6a5837
SSDEEP

3072:rPeWQlGvGdQb3amCJdTCIOsxW9N2exUtuNpBZFMoFZNtfG:rWTgP3amCJmsxE2enpBZ3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b89c213f2d522dfc1632d3a3830f50_NeikiAnalytics.exe

Files

03b89c213f2d522dfc1632d3a3830f50_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

c5a167579aad18443cac254e0e2629e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
Sleep
CreateEventA
CloseHandle
CreateFileA
lstrcpyA
lstrcatA
GetLastError
ReadFile
WriteFile
DeviceIoControl
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetOverlappedResult
ResetEvent
GetPrivateProfileIntA
WritePrivateProfileStringA
GetSystemTime
GetPrivateProfileStringA
GetFileSize
SetFilePointer
DeleteFileA
VirtualAlloc
VirtualFree
GetWindowsDirectoryA
CreateSemaphoreA
OpenSemaphoreA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetVersionExA
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapFree
HeapAlloc
RtlUnwind
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
RaiseException

user32

wsprintfA

Exports

Exports

CreateInstance
ReleaseInstance
USBDetect
vDefaultAttribute
vDoDecryption
vEraseCaliData
vGetDriverVersion
vGetLampStatus
vGetLast32Bytes
vGetMultiLampStatus
vGetSampleLines
vInitializeScanner
vPaperReady
vScanner35TACalibrate
vScanner35TACalibrateSupportedStatus
vScannerAbortScan
vScannerCapability
vScannerGetCompCapab
vScannerGetImage
vScannerGetSupportedButtons
vScannerMutiLens
vScannerSetCompParam
vScannerSetFlickerButtons
vScannerStartScan
vSetLampStatus
vSetMultiLampStatus
vSetSampleLines

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5a167579aad18443cac254e0e2629e5

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 24KB - Virtual size: 28KB

.rsrc Size: 4KB - Virtual size: 928B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 24KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 928B

.reloc
Size: 8KB - Virtual size: 7KB