a2b8a6d3020c8d2047a6df2458aac050_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a2b8a6d3020c8d2047a6df2458aac050_NeikiAnalytics.exe
Size

416KB
MD5

a2b8a6d3020c8d2047a6df2458aac050
SHA1

2ec69b4ab8c324657268d2572c2649b7a7849238
SHA256

e54abfc6b9c7d529568a8b4663fd4ea009a4748a30b3efbed633c28574c2c948
SHA512

d27e3980ca05ab9922510d273eef3036f64b79138af1a866871889dd34b20915c622d9d69696bc751490589e96867561c6aafa975c65df164c8404fea935ab60
SSDEEP

6144:thbeKfqHs9uJfT3EVVza9+3l4NG0s/2meKKwTSVZZ+Fk2r+obqqDLu8tiu:tEKfqHs9uJfmVGI3almeKKwWX0MRqnuc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b8a6d3020c8d2047a6df2458aac050_NeikiAnalytics.exe

Files

a2b8a6d3020c8d2047a6df2458aac050_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

26f70feeacf263da5f3f0a439959d5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
GetTickCount
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GlobalSize
CopyFileA
SizeofResource
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetOEMCP
FileTimeToLocalFileTime
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
CreateThread
ExitThread
RaiseException
HeapReAlloc
HeapSize
GetACP
GetStringTypeA
GetStringTypeW
GetLocalTime
HeapFree
GetFullPathNameA
CreateProcessA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetCPInfo
GetStringTypeExA
UnlockFile
MoveFileA
SetEndOfFile
DuplicateHandle
LockFile
FlushFileBuffers
GetProcessVersion
SetErrorMode
GetThreadLocale
GlobalAddAtomA
GetVersion
GlobalGetAtomNameA
GetCurrentDirectoryA
GlobalFindAtomA
GetModuleHandleA
TlsGetValue
GlobalFlags
MulDiv
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
FormatMessageA
LocalAlloc
SetLastError
InterlockedIncrement
LocalFree
InterlockedDecrement
LockResource
FindResourceA
LoadResource
ResumeThread
SuspendThread
SetThreadPriority
GetCurrentThread
SetEvent
GlobalDeleteAtom
GetLongPathNameW
GetCurrentThreadId
IsDBCSLeadByte
FindFirstFileA
GetLongPathNameA
MoveFileExA
RemoveDirectoryA
lstrcmpA
SetFileAttributesA
GetEnvironmentVariableA
FindNextFileA
FindClose
CreateDirectoryA
GetCurrentProcessId
GetTempFileNameA
GetExitCodeProcess
lstrlenW
WaitForSingleObject
GetShortPathNameW
GetShortPathNameA
GetModuleFileNameW
GlobalAlloc
GetVersionExA
WriteFile
GlobalUnlock
GlobalLock
GlobalHandle
WideCharToMultiByte
GlobalFree
lstrcatA
FatalAppExitA
LCMapStringA
GetModuleFileNameA
CreateEventA
GetPrivateProfileSectionNamesA
lstrcpyA
lstrcmpiA
HeapDestroy
LCMapStringW
PulseEvent
GetVolumeInformationA
GetWindowsDirectoryA
GetProcAddress
GetLastError
GetProfileStringA
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetFileAttributesA
OpenMutexA
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
Sleep
MultiByteToWideChar
lstrlenA
GetCurrentProcess

user32

GetTopWindow
IsChild
GetCapture
WinHelpA
CreateDialogIndirectParamA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetDialogBaseUnits
EndDialog
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
DestroyIcon
PostThreadMessageA
GetForegroundWindow
DestroyWindow
SetForegroundWindow
SetWindowPlacement
wvsprintfA
GetWindowPlacement
ShowWindow
MoveWindow
SetWindowLongA
GetWindowTextLengthA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
RegisterWindowMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ScreenToClient
GetMenuStringA
DeleteMenu
RemoveMenu
AppendMenuA
RegisterClipboardFormatA
InflateRect
DestroyMenu
CharUpperA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
UpdateWindow
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetMessageTime
GetMessagePos
SetDlgItemTextA
InsertMenuA
GetMenuItemCount
GetDesktopWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnhookWindowsHookEx
OemToCharA
CharToOemA
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
ShowOwnedPopups
SendMessageA
PostMessageA
PostQuitMessage
TranslateMessage
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
wsprintfA
ExitWindowsEx
SetFocus
GetSystemMetrics
SendDlgItemMessageA
SetDlgItemInt
CreateWindowExA
InvalidateRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

olepro32

ord253

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA

ole32

WriteFmtUserTypeStg
CreateBindCtx
OleDuplicateData
WriteClassStg
SetConvertStg
OleInitialize
CoDisconnectObject
OleRun
CoTaskMemAlloc
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemFree
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
OleRegGetUserType
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
OleSetClipboard
OleFlushClipboard
CLSIDFromString
ReleaseStgMedium
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
OleIsCurrentClipboard
CreateStreamOnHGlobal
StringFromGUID2
CoCreateInstance
CoInitialize

oleaut32

LoadTypeLi
SysStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnlock
SafeArrayLock
SafeArrayPtrOfIndex
SafeArrayAllocDescriptor
SafeArrayAllocData
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SysAllocStringByteLen
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SysReAllocStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetVartype
SysAllocString
VariantInit
VariantClear
SafeArrayCopy
SafeArrayGetElement
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreate
SysFreeString

gdi32

ExtCreatePen
GetWindowExtEx
GetViewportExtEx
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
GetTextExtentPoint32A
CreateDCA
GetTextMetricsA
CreateFontIndirectA
CreateRectRgnIndirect
CopyMetaFileA
SetRectRgn
CreateSolidBrush
CombineRgn
PatBlt
GetMapMode
CreatePen
DPtoLP
GetBkColor
LPtoDP
GetObjectA
GetDCOrgEx
GetTextColor
ExtTextOutA
TextOutA
Escape
PtVisible
CreateDIBPatternBrushPt
RectVisible
CreateHatchBrush
CreateBitmap
CreatePatternBrush
DeleteDC
StartDocA
DeleteObject
RestoreDC
SelectObject
SaveDC
SelectPalette
SetBkColor
GetStockObject
SetPolyFillMode
SetROP2
SetBkMode
SetTextColor
SetMapMode
SetStretchBltMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
OffsetClipRgn
SetTextJustification
SetTextCharacterExtra
SetTextAlign
GetCurrentPositionEx
ArcTo
SetMapperFlags
PolyDraw
PolylineTo
SetArcDirection
PolyBezierTo
GetClipRgn
SetColorAdjustment
SelectClipPath
ExtSelectClipRgn
CreateRectRgn
GetObjectType
EnumMetaFile
PlayMetaFileRecord
PlayMetaFile
GetDeviceCaps

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

DragAcceptFiles
ExtractIconA
SHGetFileInfoA

comctl32

ord17

oledlg

ord8

Sections

.text
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26f70feeacf263da5f3f0a439959d5e6

Headers

File Characteristics

Imports

kernel32

user32

olepro32

advapi32

ole32

oleaut32

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

Sections

.text Size: 304KB - Virtual size: 300KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 40KB - Virtual size: 53KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 304KB - Virtual size: 300KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 40KB - Virtual size: 53KB

.rsrc
Size: 4KB - Virtual size: 1KB