ec275e7c52f2247972ccf224aa620d70_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ec275e7c52f2247972ccf224aa620d70_NeikiAnalytics.exe
Size

196KB
MD5

ec275e7c52f2247972ccf224aa620d70
SHA1

dc16cdd8fd22f470c64b8a23d7eda4b56da75aac
SHA256

5639db38ef7026b1efcfdee940cf0989925920b4e96f648256de5af077595b59
SHA512

ce640445ab0f081500b56c3c7134f3571b13db641c5ccd95da24fa6af7417a5c3de51ffa7c396fd6aa51cdd2b39f541734ea6f95852410d900b4166349e65452
SSDEEP

3072:iAGRnMG6w1Jm1TD/i4rZ28pokjJJlO8eOKLH:+JMUkTr18uOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec275e7c52f2247972ccf224aa620d70_NeikiAnalytics.exe

Files

ec275e7c52f2247972ccf224aa620d70_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

c95f2127a62c37ac4ff747eafec680df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
GetPrivateProfileStringA
Sleep
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleFileNameA
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
TerminateProcess
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
InterlockedExchange
SetSystemPowerState
OutputDebugStringA
DebugBreak
WideCharToMultiByte
lstrcmpA
GlobalLock
GlobalUnlock
lstrlenW
GlobalAlloc
FindResourceA
LoadResource
LockResource
GlobalHandle
GlobalFree
FreeResource
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
CreateMutexA
GetLastError
CloseHandle
lstrlenA
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsW
GetCurrentThreadId

user32

InflateRect
DrawTextA
ScreenToClient
CharLowerA
wsprintfA
CreateWindowExA
wvsprintfA
LoadStringA
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
DestroyIcon
RedrawWindow
IsWindow
GetClassNameA
GetFocus
IsChild
ReleaseDC
CopyRect
FillRect
EndPaint
CallWindowProcA
GetSysColor
DrawStateA
CreateAcceleratorTableA
CopyImage
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
ShowWindow
IsDialogMessageA
SendMessageA
GetDlgItem
SetWindowPos
SetTimer
MoveWindow
SystemParametersInfoA
GetWindowRect
FrameRect
DrawFocusRect
OffsetRect
SetCursor
GetDlgCtrlID
GetCapture
ClientToScreen
GetDC
WindowFromPoint
CreateDialogIndirectParamA
DialogBoxIndirectParamA
GetWindowTextLengthA
BeginPaint
DestroyCursor
IsWindowVisible
KillTimer
LoadIconA
SetWindowTextA
LoadImageA
GetSystemMetrics
GetWindowTextA
SetDlgItemTextA
MessageBeep
DestroyMenu
SetWindowLongA
EnumChildWindows
IsWindowEnabled
EnableWindow
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
CharNextA
MessageBoxA
SetFocus
GetDesktopWindow
EndDialog
GetActiveWindow
DialogBoxParamA
CreatePopupMenu
AppendMenuA
SetMenuDefaultItem
IsMenu
GetCursorPos
SetForegroundWindow
TrackPopupMenu
ExitWindowsEx
DestroyWindow
PostQuitMessage
GetWindowLongA
GetParent
GetWindow
GetClientRect
MapWindowPoints

gdi32

CreateSolidBrush
GetDeviceCaps
GetStockObject
SetTextColor
SetBkMode
LineTo
MoveToEx
CreateCompatibleBitmap
CreateBrushIndirect
CreatePen
StretchBlt
SetStretchBltMode
SetBkColor
ExtTextOutA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
Rectangle
CreateFontIndirectA
GetObjectA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

shell32

Shell_NotifyIconA
ShellExecuteA

ole32

CoTaskMemAlloc
StringFromCLSID
OleLockRunning
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoTaskMemFree

oleaut32

LoadRegTypeLi
SysAllocString
SysStringLen
SysAllocStringLen
VariantChangeType
VariantClear
SysFreeString
OleCreateFontIndirect

comctl32

InitCommonControlsEx

msimg32

GradientFill

winmm

timeGetTime

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c95f2127a62c37ac4ff747eafec680df

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

winmm

version

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 40KB - Virtual size: 36KB