b6a2ac7f9e186c67f285dbafa7335850_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b6a2ac7f9e186c67f285dbafa7335850_NeikiAnalytics.exe
Size

2.1MB
MD5

b6a2ac7f9e186c67f285dbafa7335850
SHA1

23851d5f6ae94440c9171b3a568d4460d50a927d
SHA256

6025e2e7eb84eb68c691590aa3ce6d25fe89a99a8e83c2c18b9d9b9f3a03b19e
SHA512

f72145e28b2401092900431700f6f98b8d2b4be060e95889ff12c91802c9a6e114cbe205242a34d1b1fe67ecbcfd02e77b27020b7bc8b8185110783386846d1c
SSDEEP

24576:FAWWxhCoYMb3EU+q58Cj87le+VyMfEs8A0MELlzj2TPb21DZ3XP0s0/Y6TKAJIS5:qWDQI7nVJTgdJ/2zzGJYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6a2ac7f9e186c67f285dbafa7335850_NeikiAnalytics.exe

Files

b6a2ac7f9e186c67f285dbafa7335850_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

434a0cb1f16402c486fef4ce7fbc56ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetDateFormatW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenFileMappingW
GetCurrentThreadId
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ResetEvent
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetCurrentThread
GetCurrentProcessId
GetCurrentDirectoryW
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetCommandLineW
GetACP
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
ExitProcess
EnumSystemLocalesW
DeleteCriticalSection
DebugBreak
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetDriveTypeW
LCMapStringA
OpenProcess

user32

PostQuitMessage
PtInRect
RedrawWindow
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetFocus
SetMenuItemInfoW
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnregisterClassW
UpdateWindow
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
InvalidateRect
IntersectRect
GetWindowTextW
PostMessageW
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollInfo
GetParent
GetMessageW
GetMenu
GetKeyState
GetIconInfo
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
PeekMessageW
OpenClipboard
OffsetRect
GetWindowThreadProcessId
GetForegroundWindow
AdjustWindowRectEx
GetCapture
GetActiveWindow
FlashWindow
FillRect
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExA
DrawIcon
DrawFocusRect
MoveWindow
MessageBoxW
MapWindowPoints
GetWindowTextLengthW
LoadStringW
BeginPaint
CallWindowProcW
CharNextW
CharUpperW
CheckMenuRadioItem
CloseClipboard
CopyRect
CreateDialogParamW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcW
CreateWindowExW
DrawTextExW

gdi32

GetDIBits
GetObjectW
GetStockObject
Polygon
RealizePalette
GetDIBColorTable
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBits
SetStretchBltMode
SetTextColor
SetViewportOrgEx
TextOutW
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontW
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectClipRgn
StartPage

rpcrt4

UuidToStringA
RpcStringFreeA

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
AdjustTokenPrivileges

shell32

CommandLineToArgvW
ExtractIconW
Shell_NotifyIconW
ShellExecuteW

ole32

CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoCreateGuid

Sections

.text
Size: 760KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vcp1204
Size: 986KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

434a0cb1f16402c486fef4ce7fbc56ae

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

rpcrt4

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 760KB - Virtual size: 757KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 376KB - Virtual size: 376KB

.vcp1204 Size: 986KB - Virtual size: 988KB

.text
Size: 760KB - Virtual size: 757KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 376KB - Virtual size: 376KB

.vcp1204
Size: 986KB - Virtual size: 988KB