2f4f4d1b1301b7eecd7b7293456fa8e0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2f4f4d1b1301b7eecd7b7293456fa8e0_NeikiAnalytics.exe
Size

4.5MB
MD5

2f4f4d1b1301b7eecd7b7293456fa8e0
SHA1

57982d87482cf5071a33aa6223cb4b4c63cff04a
SHA256

c768c26f33d6b7f1ef6a4dfeb4c18ad7028bb4e4bba4c79d42245263547672c6
SHA512

de5bd0a7cef2d36fcb62e2dfe99a7f37b03bbfd06218f19a4304af64f8d6a5c7910fbac38892789929d59f9e227db7c07dc38dfcf6fad68bfa2675e42e412ba0
SSDEEP

98304:/C9Yp7N7K18bxkYR5O+qGIopIgmnIl6KovjzrMbAvVa3w6QA0dMJz6:dpjrmUFoIl6KoTNa3wpXdCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4f4d1b1301b7eecd7b7293456fa8e0_NeikiAnalytics.exe

Files

2f4f4d1b1301b7eecd7b7293456fa8e0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

077748b78c277c628bdfa1effef22d87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Projects\graphstudionext\bin\graphstudionext.pdb

Imports

quartz

AMGetErrorTextW

winmm

timeGetTime
timeSetEvent
timeKillEvent
timeBeginPeriod
PlaySoundW
timeEndPeriod

msdmo

DMOEnum
DMOUnregister
MoFreeMediaType

kernel32

GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
RtlUnwind
ExitThread
ExitProcess
GetModuleHandleExW
HeapQueryInformation
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentDirectoryW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
ReadConsoleW
WriteConsoleW
GetDriveTypeW
SetEnvironmentVariableA
ResetEvent
WaitForMultipleObjects
ReleaseSemaphore
VirtualFree
InterlockedExchange
GetThreadPriority
InterlockedPushEntrySList
SetErrorMode
LocalFileTimeToFileTime
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFlags
FileTimeToSystemTime
FindNextFileW
FileTimeToLocalFileTime
GlobalGetAtomNameW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFileTime
CompareStringA
GetCurrentThread
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
lstrcmpA
VerifyVersionInfoW
VerSetConditionMask
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
DuplicateHandle
GetVolumeInformationW
GetShortPathNameW
FindFirstFileW
FindClose
CopyFileW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
GetModuleHandleA
FreeResource
GlobalReAlloc
FindResourceExW
LocalAlloc
SearchPathW
lstrcatW
DecodePointer
GetLocaleInfoW
SetDllDirectoryW
GetModuleHandleW
CreateThread
FreeConsole
GetStdHandle
AllocConsole
lstrcmpW
GlobalLock
GlobalUnlock
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameW
RaiseException
InterlockedDecrement
InterlockedIncrement
lstrcpyW
lstrlenW
GetFileSizeEx
SetFilePointerEx
QueryPerformanceFrequency
GetLocalTime
SetLastError
InitializeCriticalSectionAndSpinCount
GlobalFree
GlobalSize
GlobalAlloc
MulDiv
lstrcpynW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetCurrentProcessId
DeleteFileW
CloseHandle
GetVersionExA
OutputDebugStringA
DeleteCriticalSection
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
HeapSize
GetProcAddress
GetLastError
GetTempPathW
FlushFileBuffers
MultiByteToWideChar
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
LeaveCriticalSection
HeapDestroy
GetVersionExW
FormatMessageW
Sleep
LoadLibraryW
WideCharToMultiByte
InitializeCriticalSection
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
LockFile
UnlockFile
InterlockedCompareExchange
WaitForSingleObject
HeapFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapAlloc
FreeLibrary
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
HeapCompact
CreateMutexW
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
VirtualProtect
GetProfileIntW
GetVersion
GetWindowsDirectoryW
InitializeSListHead
InterlockedPopEntrySList
GetTimeZoneInformation

user32

GetNextDlgGroupItem
PostThreadMessageW
SetClassLongW
LockWindowUpdate
SetParent
SetCursorPos
CopyAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetIconInfo
GetSystemMenu
GetAsyncKeyState
DrawIconEx
DrawFrameControl
DrawEdge
DrawStateW
CopyImage
RealChildWindowFromPoint
NotifyWinEvent
UnionRect
IsZoomed
DestroyCursor
ShowOwnedPopups
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
InsertMenuItemW
BringWindowToTop
LoadAcceleratorsW
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
IsIconic
DestroyMenu
DrawIcon
GetMessageW
WindowFromPoint
SetRectEmpty
GetSysColorBrush
SetLayeredWindowAttributes
InflateRect
SetWindowRgn
CharUpperW
SendDlgItemMessageA
RemoveMenu
AppendMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
ShowWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
AdjustWindowRectEx
RemovePropW
GetTabbedTextExtentW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
GetClassInfoW
RegisterClassW
GetMessageTime
GetMessagePos
PeekMessageW
MapVirtualKeyW
GetKeyNameTextW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
TrackMouseEvent
MapWindowPoints
DispatchMessageW
TranslateMessage
DrawFocusRect
ValidateRect
SetCursor
MessageBoxW
GetActiveWindow
CreateDialogParamW
SetForegroundWindow
LoadIconW
MapDialogRect
LoadMenuW
EnableMenuItem
SetMenuItemInfoW
LoadBitmapW
GetSystemMetrics
TranslateAcceleratorW
SetRect
EnableWindow
SendMessageW
GetClientRect
IsWindow
InvalidateRect
GetMenuItemInfoW
PostMessageW
KillTimer
SetActiveWindow
SetTimer
CopyRect
EnumDisplayMonitors
SystemParametersInfoW
IsWindowVisible
GetKeyState
MonitorFromRect
EqualRect
GetMonitorInfoW
MonitorFromPoint
UpdateWindow
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
CreateMenu
GetMenuDefaultItem
EnableScrollBar
HideCaret
InvertRect
IsClipboardFormatAvailable
GetDoubleClickTime
GetQueueStatus
MsgWaitForMultipleObjects
GetWindowRgn
GetComboBoxInfo
WaitMessage
EndPaint
IsChild
GetFocus
SetFocus
GetWindow
GetDlgItem
GetClassNameW
GetSysColor
CharNextW
SubtractRect
GetUpdateRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
FrameRect
UpdateLayeredWindow
CharUpperBuffW
IsMenu
SetMenuDefaultItem
GetPropW
CopyIcon
GetCursorPos
MessageBeep
PtInRect
CreatePopupMenu
InsertMenuW
GetMenuItemCount
SetCapture
ReleaseCapture
IntersectRect
IsRectEmpty
GetDC
ReleaseDC
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
ModifyMenuW
GetSubMenu
DeleteMenu
GetMenuItemID
GetWindowRect
OffsetRect
UnregisterClassW
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowLongW
GetWindowLongW
DestroyAcceleratorTable
GetDesktopWindow
CallWindowProcW
InvalidateRgn
FillRect
MoveWindow
ScreenToClient
GetParent
ClientToScreen
CreateAcceleratorTableW
DestroyWindow
CreateWindowExW
GetClassInfoExW
RedrawWindow
SetWindowPos

gdi32

OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
CreateRoundRectRgn
CreateDIBitmap
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CreateEllipticRgn
Ellipse
DPtoLP
LPtoDP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
GetCharWidthW
StretchDIBits
GetBkColor
GetTextColor
CombineRgn
GetMapMode
SetRectRgn
RealizePalette
StretchBlt
OffsetViewportOrgEx
CreatePolygonRgn
Polyline
GetRgnBox
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetWindowOrgEx
GetTextFaceW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
SetLayout
SetMapMode
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
StartDocW
SetTextAlign
SetStretchBltMode
SetROP2
SetPolyFillMode
CreateCompatibleDC
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetTextColor
SetBkColor
CreateRectRgnIndirect
CreateDIBSection
CreateSolidBrush
SelectObject
GetStockObject
GetObjectW
DeleteObject
CreateBitmap
BitBlt
PatBlt
CreateCompatibleBitmap
SetPixel
GetPixel
Rectangle
Polygon
CreateFontW
DeleteDC
GetDeviceCaps
EnumFontFamiliesExW
GetLayout

msimg32

AlphaBlend
TransparentBlt

winspool.drv

GetJobW
ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

FreeSid
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegSetValueW
RegCreateKeyW
RegEnumValueW
CheckTokenMembership
AllocateAndInitializeSid
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW

shell32

DragQueryPoint
DragQueryFileW
DragFinish
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHAddToRecentDocs
SHGetFileInfoW
ExtractIconW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
DragAcceptFiles

comctl32

ImageList_AddMasked
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragLeave
InitCommonControlsEx
ImageList_EndDrag

shlwapi

PathAddExtensionW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathFileExistsW
PathRenameExtensionW
PathStripPathW
PathRemoveFileSpecW
SHRegGetPathW
SHCreateStreamOnFileW
PathIsUNCW
PathStripToRootW
SHStrDupW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
DrawThemeParentBackground
OpenThemeData

ole32

StgCreateDocfile
StgOpenStorage
StgIsStorageFile
MkParseDisplayName
CreateBindCtx
OleGetClipboard
CreateStreamOnHGlobal
CreateItemMoniker
GetRunningObjectTable
StringFromCLSID
CLSIDFromString
CoTaskMemFree
IsAccelerator
OleTranslateAccelerator
CoGetMalloc
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoLoadLibrary
CoRevokeClassObject
CoTaskMemAlloc
OleUninitialize
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
OleInitialize
CoInitializeEx
CoRegisterClassObject
OleDuplicateData
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoDisconnectObject
PropVariantClear
CoFreeUnusedLibraries
CoInitialize
OleDestroyMenuDescriptor
DoDragDrop
CoCreateGuid
CoUninitialize
CoCreateInstance

oleaut32

LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
SysAllocStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VariantCopy
VarBstrFromDate
SysFreeString
OleCreateFontIndirect
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown
GdipSaveImageToFile
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusStartup
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage

xmllite

CreateXmlReader

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

gethostbyname
inet_ntoa
gethostname

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 815KB - Virtual size: 815KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 780KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

077748b78c277c628bdfa1effef22d87

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

quartz

winmm

msdmo

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

xmllite

version

ws2_32

oleacc

imm32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 815KB - Virtual size: 815KB

.data Size: 77KB - Virtual size: 121KB

.rsrc Size: 186KB - Virtual size: 186KB

.reloc Size: 780KB - Virtual size: 784KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 815KB - Virtual size: 815KB

.data
Size: 77KB - Virtual size: 121KB

.rsrc
Size: 186KB - Virtual size: 186KB

.reloc
Size: 780KB - Virtual size: 784KB