05e076a156a05b71c767fdf1ae974277e7fa3b4c119516808852aea6495aaaf9_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

05e076a156a05b71c767fdf1ae974277e7fa3b4c119516808852aea6495aaaf9_NeikiAnalytics
Size

7.0MB
MD5

e420fe30eeb4335c6d33bd7f2db37c80
SHA1

735e609ee6d6fa80ac7ccfeb2a3077e35237c584
SHA256

05e076a156a05b71c767fdf1ae974277e7fa3b4c119516808852aea6495aaaf9
SHA512

3e182d4abad1ff0b0605b284640607c66aff8379637579000d708a3d463b6d19cc9b2fbee2d9368fd7e971b93378c81e3b97dbbb387c47e1288cbe41691b25b0
SSDEEP

196608:r/pzb8Jt389f17/OgijbyWZPi6lVm5w06LFWP0diWEgWgyew2:tIX89Fdij+WZBbmGL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e076a156a05b71c767fdf1ae974277e7fa3b4c119516808852aea6495aaaf9_NeikiAnalytics

Files

05e076a156a05b71c767fdf1ae974277e7fa3b4c119516808852aea6495aaaf9_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

7eab7c405659f7e27577044ceb29ce4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Work\Main\Client\DnManualUpdater\Release_IDN\DnManualUpdater.pdb

Imports

kernel32

TlsFree
GlobalFlags
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
WriteConsoleW
GetFileType
GetStdHandle
HeapReAlloc
RtlUnwind
RaiseException
ExitThread
CreateThread
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LocalReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetModuleHandleA
GlobalFindAtomW
LoadLibraryW
CompareStringW
LoadLibraryA
GetCurrentProcessId
GlobalAddAtomW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
FreeResource
InterlockedDecrement
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GetProcAddress
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
SetFilePointer
CreateFileA
SetFileAttributesA
GetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindNextFileA
FindFirstFileA
OutputDebugStringA
GetVersionExA
CreateDirectoryA
RemoveDirectoryA
GetLastError
GetModuleHandleW
lstrlenW
WriteFile
DeleteFileA
FindClose
FindNextFileW
WideCharToMultiByte
SetCurrentDirectoryW
FindFirstFileW
DeleteFileW
GetCurrentDirectoryW
WaitForSingleObject
SetCurrentDirectoryA
GetModuleFileNameW
GetCurrentDirectoryA
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
ReadFile
GetFileSize
CreateFileW
MultiByteToWideChar
lstrlenA
lstrcmpA
GetModuleFileNameA
CloseHandle

user32

PostThreadMessageW
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
UnregisterClassW
GetSysColorBrush
MoveWindow
IsDialogMessageW
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ReleaseDC
GetDC
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetForegroundWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
RegisterClipboardFormatW
DestroyMenu
GetParent
ModifyMenuW
GetTopWindow
MessageBeep
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextW
SetWindowLongW
ShowWindow
CreateWindowExW
RegisterClassW
LoadCursorW
DestroyWindow
DefWindowProcW
SetFocus
CallWindowProcW
SetWindowTextW
KillTimer
EnableWindow
LoadIconW
DrawIcon
GetClientRect
GetSystemMetrics
SendMessageW
SetTimer
IsIconic
wsprintfA
EqualRect
UnregisterClassA

gdi32

DeleteDC
GetBkColor
GetTextColor
GetRgnBox
ExtSelectClipRgn
GetMapMode
GetWindowExtEx
GetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetStockObject
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyW

comctl32

InitCommonControlsEx

shlwapi

StrStrW
PathFindExtensionW
PathStripToRootW
PathFileExistsA
PathFindFileNameW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
StgOpenStorageOnILockBytes
CoTaskMemFree
CoRevokeClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString

wininet

InternetOpenUrlW
InternetOpenW
DeleteUrlCacheEntryW
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
InternetCloseHandle

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7eab7c405659f7e27577044ceb29ce4c

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 292KB - Virtual size: 289KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 20KB - Virtual size: 98KB

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: 292KB - Virtual size: 289KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 20KB - Virtual size: 98KB

.rsrc
Size: 40KB - Virtual size: 37KB