3b94744c1af3863468425acb2d086870_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
3b94744c1af3863468425acb2d086870_NeikiAnalytics.exe
Size 732KB
Sample240518-yfdfwscf26
SHA256 7286faa87d9761ae37f4cd3122865b829f2cab42eff87a3ffba01047929e508a
MD5 3b94744c1af3863468425acb2d086870
SHA1 e8e04d433b325e7c6f7375ed90eb6f44bddb4a50
SHA512 bf12103aa593d6a4d5fa8325c22f26487b718865c278dc1a740780490c6ac1438db082bfbfcf1847be18c449076c4cc3db7c1289a2104f84863cac348ca639e7
SSDEEP 12288:ITyjXW+48qWywrU4kGFezOAVuJ5PIqww7F5DO3HYff8vt8nF:GIXW/8yw1ez54lIUF5SXYH0+nF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b94744c1af3863468425acb2d086870_NeikiAnalytics.exe

File Explorer

3b94744c1af3863468425acb2d086870_NeikiAnalytics.exe

.exe 732KB

3b94744c1af3863468425acb2d086870_NeikiAnalytics.exe

IMPHASH 376583ef03e4007760fb1259334fc710
SHA256 7286faa87d9761ae37f4cd3122865b829f2cab42eff87a3ffba01047929e508a
MD5 3b94744c1af3863468425acb2d086870
SHA1 e8e04d433b325e7c6f7375ed90eb6f44bddb4a50
SHA512 bf12103aa593d6a4d5fa8325c22f26487b718865c278dc1a740780490c6ac1438db082bfbfcf1847be18c449076c4cc3db7c1289a2104f84863cac348ca639e7
SSDEEP 12288:ITyjXW+48qWywrU4kGFezOAVuJ5PIqww7F5DO3HYff8vt8nF:GIXW/8yw1ez54lIUF5SXYH0+nF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

503252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup inet_addr gethostbyname gethostname WSAStartup

winmm

mixerSetControlDetails waveOutGetVolume joyGetPosEx mixerGetControlDetailsA mixerOpen mixerGetDevCapsA mixerGetLineControlsA waveOutSetVolume mixerClose mciSendStringA joyGetDevCapsA mixerGetLineInfoA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

comctl32

ImageList_ReplaceIcon ImageList_AddMasked ord17 ImageList_GetIconSize ImageList_Create ImageList_Destroy ord6

kernel32

CreateProcessA GetFileAttributesA MultiByteToWideChar WideCharToMultiByte GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableA GetLocalTime GetDateFormatA GetTimeFormatA SetErrorMode GetDiskFreeSpaceA SetVolumeLabelA CreateFileA DeviceIoControl GetDriveTypeA GetVolumeInformationA CreateDirectoryA ReadFile GetACP WriteFile GlobalSize DeleteFileA SetFileAttributesA LocalFileTimeToFileTime SetFileTime GetSystemTime GetComputerNameA GetWindowsDirectoryA GetTempPathA GetFullPathNameA GetShortPathNameA LoadLibraryA FreeLibrary EnterCriticalSection LeaveCriticalSection VirtualProtect CompareStringA RemoveDirectoryA CopyFileA OutputDebugStringA FormatMessageA GetPrivateProfileStringA GetPrivateProfileSectionA GetPrivateProfileSectionNamesA WritePrivateProfileStringA WritePrivateProfileSectionA SetEndOfFile GetFileType SetFilePointerEx GetFileSizeEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize EnumResourceNamesA LoadLibraryExA FindResourceA LoadResource LockResource SizeofResource LCMapStringW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetCPInfo GetStartupInfoW HeapSetInformation GetCommandLineA HeapQueryInformation HeapSize InterlockedIncrement InterlockedDecrement HeapFree HeapReAlloc ExitProcess GetModuleHandleW HeapAlloc SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameW HeapCreate InitializeCriticalSectionAndSpinCount MoveFileA Beep SetEnvironmentVariableA FileTimeToLocalFileTime FindClose FindNextFileA FindFirstFileA GetSystemTimeAsFileTime MulDiv GetModuleFileNameA DeleteCriticalSection GetVersionExA GetLastError CreateMutexA CloseHandle GetExitCodeThread SetThreadPriority CreateThread lstrcmpiA GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock GetModuleHandleA GetProcAddress GetCurrentDirectoryA InitializeCriticalSection SetCurrentDirectoryA Sleep GetTickCount LoadLibraryW GetLocaleInfoW SetHandleCount IsProcessorFeaturePresent GetStringTypeW GetUserDefaultLCID UnhandledExceptionFilter GetLocaleInfoA EnumSystemLocalesA IsValidLocale RaiseException RtlUnwind GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter SetFilePointer FlushFileBuffers WriteConsoleW SetStdHandle GetProcessHeap CreateFileW GetCurrentProcess VirtualQuery

user32

GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringA IsWindowEnabled ExitWindowsEx SetMenu FlashWindow MapWindowPoints RedrawWindow UpdateWindow GetMessagePos GetClassLongA DefDlgProcA CallWindowProcA CheckRadioButton IntersectRect PtInRect AppendMenuA SetMenuDefaultItem RemoveMenu SetMenuItemInfoA IsMenu CreateMenu CreatePopupMenu SetMenuInfo DestroyMenu TrackPopupMenuEx CreateIconIndirect GetDesktopWindow CopyImage LookupIconIdFromDirectoryEx CreateIconFromResourceEx GetWindow BringWindowToTop GetTopWindow GetWindowRect GetClientRect SystemParametersInfoA AdjustWindowRectEx DrawTextA SetRect GetIconInfo SetWindowTextA GetCursor CheckMenuItem MessageBoxA SetClipboardViewer LoadAcceleratorsA DrawIconEx GetDC EnableMenuItem GetMenu CreateWindowExA LoadCursorA LoadImageA ChangeClipboardChain DestroyIcon DestroyWindow IsCharAlphaA MapVirtualKeyA GetKeyNameTextA VkKeyScanExA GetWindowTextA mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos PostMessageW GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey PostQuitMessage SendMessageTimeoutA UnhookWindowsHookEx SetWindowsHookExA PostThreadMessageA IsCharUpperA IsCharLowerA IsCharAlphaNumericA ToAsciiEx GetKeyboardLayout CallNextHookEx CharLowerA OpenClipboard GetClipboardData ClientToScreen GetCaretPos EnumClipboardFormats MessageBeep SetDlgItemTextA GetDlgItem SendDlgItemMessageA DialogBoxParamA SetForegroundWindow DefWindowProcA IsWindowVisible FillRect GetClipboardFormatNameA CloseClipboard SetClipboardData EmptyClipboard PostMessageA FindWindowA EndDialog IsWindow DispatchMessageA TranslateMessage GetSysColorBrush GetSysColor RegisterWindowMessageA IsIconic IsZoomed EnumWindows GetWindowTextLengthA EnableWindow InvalidateRect SetWindowPos SetWindowRgn SetFocus SetActiveWindow EnumChildWindows MoveWindow ReleaseDC GetQueueStatus TranslateAcceleratorA ShowWindow CountClipboardFormats SetWindowLongA ScreenToClient IsDialogMessageA SendMessageA GetWindowLongA GetKeyState KillTimer PeekMessageA GetFocus GetClassNameA GetWindowThreadProcessId GetForegroundWindow GetMessageA SetTimer GetParent GetDlgCtrlID CharUpperA IsClipboardFormatAvailable RegisterClassExA

gdi32

GetClipRgn FillRgn GetClipBox SetBkMode EnumFontFamiliesExA CreateDIBSection GdiFlush GetPixel ExcludeClipRect SetTextColor BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectA GetTextMetricsA GetTextFaceA SelectObject GetStockObject CreateDCA CreateSolidBrush GetDeviceCaps SetBkColor DeleteObject CreateFontA

comdlg32

GetOpenFileNameA GetSaveFileNameA

advapi32

RegDeleteKeyA RegSetValueExA RegCreateKeyExA RegQueryValueExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerA GetUserNameA RegEnumKeyExA RegEnumValueA RegQueryInfoKeyA RegOpenKeyExA RegCloseKey RegConnectRegistryA RegDeleteValueA

shell32

DragQueryPoint SHFileOperationA SHGetPathFromIDListA SHBrowseForFolderA SHGetDesktopFolder SHGetMalloc ShellExecuteExA Shell_NotifyIconA DragFinish DragQueryFileA ExtractIconA

ole32

OleInitialize OleUninitialize CoInitialize CoCreateInstance CoUninitialize CLSIDFromString CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayUnlock SafeArrayGetElemsize SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString SysStringLen GetActiveObject SafeArrayDestroy OleLoadPicture