bb00992575aaff5993d0f56b9a70e4d0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

bb00992575aaff5993d0f56b9a70e4d0_NeikiAnalytics.exe
Size

508KB
MD5

bb00992575aaff5993d0f56b9a70e4d0
SHA1

a600e4cab59b541ed1925e2ebdf329cda3172048
SHA256

4a83a66ee127bf43846a8c28d0cf783f70d2608b29346f9a8a1f4d069bf2c203
SHA512

512ac1cee999366d9548e6bdc4ea2e93866646cbeb4b7ea3ae4db2d0528f0472efcd7b567fd0e68b978285efe054dac309a703621589999f4038c93fe32014ab
SSDEEP

12288:mXzHLOPt7x+4K8+fVmgyDoP0F2PfIniG2/5pyO81:sKiVxV5v0YPGiD5pw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
bb00992575aaff5993d0f56b9a70e4d0_NeikiAnalytics.exe

Files

bb00992575aaff5993d0f56b9a70e4d0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

85dfe36da42ba82ffdab8a4d1a38fe9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetCurrentThreadId
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
IsDBCSLeadByte
GetFileAttributesA
CreateEventA
SetCurrentDirectoryA
GetCurrentDirectoryA
CopyFileA
QueryPerformanceFrequency
ReadFile
CompareStringA
SetFilePointer
SetEndOfFile
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
InterlockedDecrement
GetModuleFileNameA
lstrcmpA
CreateProcessA
GetProcAddress
InterlockedIncrement
WideCharToMultiByte
Sleep
_hwrite
GetTempPathA
lstrcpynA
SetLastError
GetPrivateProfileSectionA
GetTempFileNameA
WriteFile
MultiByteToWideChar
DeleteFileA
VerLanguageNameA
CloseHandle
WritePrivateProfileStringA
CreateFileA
GetVersionExA
GetLocalTime
GetVersion
FindFirstFileA
GetSystemInfo
GetWindowsDirectoryA
GetLastError
GetSystemDirectoryA
FindClose
GetUserDefaultLCID
lstrcmpiA
GetTickCount
lstrcatA
SizeofResource
GlobalSize
lstrlenA
GetPrivateProfileStringA
lstrcpyA
LockResource
FindResourceA
LoadResource
HeapDestroy
HeapCreate
GetFileSize
HeapReAlloc
SystemTimeToFileTime
QueryPerformanceCounter
ResetEvent
SetEvent
WaitForSingleObject
SearchPathA
VirtualProtect
VirtualQuery
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
RaiseException
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
GlobalAlloc
VirtualFree
FreeLibrary
TlsGetValue
TlsAlloc
FreeResource
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
CreateThread
GetDriveTypeA
GlobalFree
GlobalUnlock
SetErrorMode
LoadLibraryA
GlobalLock
_lread
_hread
_lclose

user32

MoveWindow
GetDlgItem
SetWindowPos
GetSystemMetrics
BeginPaint
EndPaint
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetDC
ReleaseDC
FindWindowA
SendMessageA
RegisterClassA
CreateWindowExA
IsWindow
DestroyCursor
UnhookWindowsHookEx
GetWindowRect
GetClientRect
GetSysColor
DialogBoxParamA
KillTimer
FillRect
SetTimer
IsCharAlphaNumericA
IsCharAlphaA
TranslateMessage
GetMessageTime
DispatchMessageA
SetWindowsHookExA
TrackPopupMenu
DestroyWindow
ValidateRect
WindowFromPoint
SetScrollRange
GetScrollRange
SetScrollPos
GetForegroundWindow
LoadBitmapA
EndDialog
RegisterWindowMessageA
CharUpperA
SetWindowLongA
GetClassInfoA
GetWindowLongA
PeekMessageA
DialogBoxIndirectParamA
GetKeyState
SetFocus
IsRectEmpty
SubtractRect
EqualRect
IntersectRect
CopyRect
UnionRect
PtInRect
SendDlgItemMessageA
SetWindowTextA
LoadIconA
LoadStringA
ReleaseCapture
SetCursor
LoadCursorA
SetCapture
SetDlgItemTextA
SetClassLongA
LoadCursorFromFileA
ScreenToClient
GetDesktopWindow
VkKeyScanA
MapVirtualKeyA
MessageBeep
CallNextHookEx
SetRectEmpty
InflateRect
SetParent
CharNextA
GetMessageA
GetParent
ClientToScreen
GetCursorPos
SetCursorPos
InvalidateRect
DrawFocusRect
EnumChildWindows
IsIconic
IsWindowVisible
ShowWindow
GetScrollPos
SetCaretPos
CharUpperBuffA
CharLowerBuffA
CreateCaret
SetCaretBlinkTime
ShowCaret
DestroyCaret
DrawTextA
SetForegroundWindow
GetDlgItemTextA
UnregisterClassA
GetClassInfoExA
RegisterClassExA
WaitForInputIdle
UpdateWindow
GetMessagePos
MsgWaitForMultipleObjects
CharLowerA
EnableWindow
GetSystemMenu
DestroyMenu
GetFocus
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
CreatePopupMenu
AppendMenuA
SetRect
ShowScrollBar

gdi32

SelectPalette
DeleteDC
RealizePalette
GetDeviceCaps
CreateDIBitmap
GetSystemPaletteEntries
DeleteObject
CreatePalette
SelectObject
UnrealizeObject
BitBlt
CreateSolidBrush
SetTextColor
CreateCompatibleDC
GetStockObject
GetObjectA
SetBkMode
AddFontResourceA
RestoreDC
RemoveFontResourceA
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
SaveDC
Rectangle
CreateRectRgn
CreateHatchBrush
DeleteEnhMetaFile
SetBkColor
CreateBitmap
CreateCompatibleBitmap
StretchBlt
PlayEnhMetaFile
SetEnhMetaFileBits
SetStretchBltMode
CreatePen
LineTo
SetWinMetaFileBits
SetPixel
GetPixel
MoveToEx
SetTextAlign
TextOutA
ExtTextOutA
Arc
Ellipse
SetTextCharacterExtra
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polygon
Polyline
RoundRect
GetTextMetricsA
GetTextExtentPoint32A
StretchDIBits
EnumFontFamiliesExA
CreateFontIndirectA
EnumFontsA
CreatePatternBrush
CreateEllipticRgnIndirect
CreateDCA
PatBlt

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

mciSendCommandA
timeGetDevCaps
timeBeginPeriod
timeSetEvent
timeGetTime
timeKillEvent

comctl32

InitCommonControlsEx

oleaut32

SysFreeString
SysAllocStringLen

shell32

ShellExecuteA

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 328KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85dfe36da42ba82ffdab8a4d1a38fe9a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

version

winmm

comctl32

oleaut32

shell32

Exports

Exports

Sections

.text Size: 328KB - Virtual size: 325KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 24KB - Virtual size: 32KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 328KB - Virtual size: 325KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 24KB - Virtual size: 32KB

.rsrc
Size: 124KB - Virtual size: 124KB