82074abdd8c8c3ffd55fef6594817f10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

82074abdd8c8c3ffd55fef6594817f10_NeikiAnalytics.exe
Size

203KB
MD5

82074abdd8c8c3ffd55fef6594817f10
SHA1

9eda73c49915cf9cfa55ee91c0ecc80bf5c438f8
SHA256

6745255897206712a19da642e68c40a096e35c5f751847e1370d103148d0f091
SHA512

98468bfe2d036271ce9888a72549fe905b1507ab27519486b5e5298aea9b9b78b3e8ed6dc1335140375d8bf1d677ad0ca4cfc329e011fdbccfaf4de79e7b60f0
SSDEEP

6144:OEL1lvsWYuOiMnGNuuF8XcfI2MPO7qhnhF9mD:3nksHxyXcfIRhFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82074abdd8c8c3ffd55fef6594817f10_NeikiAnalytics.exe

Files

82074abdd8c8c3ffd55fef6594817f10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

dec3dee9869bb0d71498fbbf0d597bb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
MoveFileW
GetLogicalDrives
WinExec
SearchPathW
GetACP
GetModuleHandleA
CreateDirectoryW
CompareStringA
GetEnvironmentStringsA
lstrcmpA
ExpandEnvironmentStringsA
SuspendThread
lstrcmpi
GetHandleInformation
lstrcatA
GetStringTypeW
CreateSemaphoreA
GetProcAddress
EnumTimeFormatsA
GetSystemDefaultLCID
GetNamedPipeInfo
GetCurrentThreadId
GetNumberFormatA
IsBadStringPtrA
GetModuleFileNameA

user32

DrawTextW
GetMessageW
OffsetRect
DialogBoxParamA
SendMessageW
CreateDialogIndirectParamW
LoadBitmapA
SetForegroundWindow
GetDlgItem
MonitorFromPoint
FindWindowW
WaitForInputIdle
CreateWindowExA
MoveWindow
SetWindowTextA
CharUpperA
GetDC
UpdateWindow
UnregisterClassA
GetKeyboardType
ShowWindow
GetClassInfoW
RegisterClassExW
CharNextA
CreateWindowExW
IsDlgButtonChecked
mouse_event
PostMessageA
RegisterClassExA
SetCursorPos
GetMenuItemInfoA
wvsprintfA
CharUpperW
GetCursorPos
GetSystemMetrics
CreateDialogParamA
GetIconInfo
ArrangeIconicWindows
DefWindowProcW
GetClassNameW
GetClassInfoExA

gdi32

BitBlt
GetTextMetricsW
CreateMetaFileW
GetEnhMetaFileA
CreateMetaFileA
EnumFontFamiliesExA
ResizePalette
FlattenPath
CreateFontIndirectW
OffsetClipRgn
GetCharABCWidthsI
SetMapperFlags
RestoreDC
TranslateCharsetInfo
SetBrushOrgEx
GetEnhMetaFileDescriptionA
PtInRegion

advapi32

RegQueryValueW
RegSaveKeyW
RegOpenKeyW
RegRestoreKeyW
RegFlushKey
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueW
RegCreateKeyExW

shlwapi

PathParseIconLocationW
UrlGetLocationW
PathFileExistsW
AssocQueryStringA
UrlCreateFromPathW
PathUndecorateA
StrCmpNIA
PathIsFileSpecW

Sections

.qtJ
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tc
Size: 3KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VXtI
Size: 3KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.B
Size: 4KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 103KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 4KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dec3dee9869bb0d71498fbbf0d597bb9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.qtJ Size: 11KB - Virtual size: 11KB

.tc Size: 3KB - Virtual size: 48KB

.VXtI Size: 3KB - Virtual size: 205KB

.B Size: 4KB - Virtual size: 235KB

.data Size: 103KB - Virtual size: 418KB

.M Size: 4KB - Virtual size: 479KB

.rsrc Size: 72KB - Virtual size: 71KB

.reloc Size: 1024B - Virtual size: 824B

.qtJ
Size: 11KB - Virtual size: 11KB

.tc
Size: 3KB - Virtual size: 48KB

.VXtI
Size: 3KB - Virtual size: 205KB

.B
Size: 4KB - Virtual size: 235KB

.data
Size: 103KB - Virtual size: 418KB

.M
Size: 4KB - Virtual size: 479KB

.rsrc
Size: 72KB - Virtual size: 71KB

.reloc
Size: 1024B - Virtual size: 824B