2ed0ef4673f2519170c8151de2db2400_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2ed0ef4673f2519170c8151de2db2400_NeikiAnalytics.exe
Size

816KB
MD5

2ed0ef4673f2519170c8151de2db2400
SHA1

3859bddaf48f9131c15b0d6947e5930847709eb8
SHA256

fe1fd3c6dcd1f0b010bc34dcbb25c8ca410eb1e180cfc409b723da8888004d26
SHA512

d2e23bf8b431b0af7b47a7463a719dd5500568516f18495c99241313bf9d3a6618718c94c4c35bcae64db64439689a1da615e5a0bb206db2054f07535e2485cb
SSDEEP

24576:nuKUWW4IuOPT0+nDidfo8biAPOTda+2mN:uKUBNi+eYfTda+2mN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ed0ef4673f2519170c8151de2db2400_NeikiAnalytics.exe

Files

2ed0ef4673f2519170c8151de2db2400_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

bb30efdb96481a94760e5758d7a5ea85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiInClose
midiInReset
midiInStop
midiOutOpen
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutClose
timeGetTime
timeSetEvent
timeBeginPeriod
timeEndPeriod
timeKillEvent
midiOutShortMsg

msvfw32

MCIWndCreateA

comctl32

ord17

kernel32

TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileSize
GetFileTime
SetErrorMode
WritePrivateProfileStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
HeapAlloc
HeapFree
GetFileType
CreateThread
ExitThread
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
HeapDestroy
HeapCreate
EnterCriticalSection
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
lstrcmpiA
lstrcatA
lstrcpyA
Sleep
FindClose
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FormatMessageA
LocalFree
VirtualFree
GetLastError
FindNextFileA
FindFirstFileA
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
ResumeThread
GlobalAlloc
lstrcmpA
GetCurrentThread
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
FindResourceA
InterlockedIncrement
MulDiv
SetLastError
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
OutputDebugStringA
GetFileAttributesA
GetTempPathA

user32

ValidateRect
GetMessageA
SetWindowContextHelpId
MapDialogRect
CharNextA
LoadStringA
InflateRect
GetClassNameA
GetDesktopWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetDC
ReleaseDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
UpdateWindow
GetCursorPos
MapWindowPoints
GetSysColor
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MessageBoxA
IsWindowVisible
IsIconic
GetSystemMetrics
DrawIcon
PeekMessageA
TranslateMessage
DispatchMessageA
LoadIconA
PtInRect
ReleaseCapture
SetCapture
SetRect
SetCursor
PostQuitMessage
CharUpperA
SendDlgItemMessageA
SetRectEmpty
SetWindowPos
GetDlgItem
ScreenToClient
IsWindow
GetParent
GetWindowRect
InvalidateRect
GetClientRect
EnableWindow
PostMessageA
SendMessageA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
RegisterClassA

gdi32

RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
SetTextColor
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetMapMode
DPtoLP
LPtoDP
GetClipBox
Polygon
GetTextExtentPoint32A
CreatePen
GetBkColor
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetTextExtentPointA
CreateDIBitmap
Ellipse

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

oledlg

ord8

ole32

OleUninitialize
OleFlushClipboard
CoFreeUnusedLibraries
OleIsCurrentClipboard
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb30efdb96481a94760e5758d7a5ea85

Headers

File Characteristics

Imports

winmm

msvfw32

comctl32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 216KB - Virtual size: 214KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 36KB - Virtual size: 57KB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 216KB - Virtual size: 214KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 36KB - Virtual size: 57KB

.rsrc
Size: 28KB - Virtual size: 26KB