17d847265fd1c1a32f78cc7df06d2900_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

17d847265fd1c1a32f78cc7df06d2900_NeikiAnalytics.exe
Size

107KB
MD5

17d847265fd1c1a32f78cc7df06d2900
SHA1

4b203446606ca327f3a2adf748c9c768afba97ce
SHA256

7940f5128dd0fe751d320be69b073b9e2c5925b482a97758aa94b563c1cb5841
SHA512

6428ad44bc2ae0636b255582a9892098d841ac74172f23ae7a1ddc0076ff5093a56a503ab2efe0cbe959995747523102f1a05813fd4b57d00f484541eda6ef46
SSDEEP

1536:dBzf9r9aMfOuZdKdbnwaAd6mohpwj/Lnn1FmbhgFFBLqkst8RuCyxz+VFf:j9BAHpwX2b+zR7yxzAF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d847265fd1c1a32f78cc7df06d2900_NeikiAnalytics.exe

Files

17d847265fd1c1a32f78cc7df06d2900_NeikiAnalytics.exe
.dll windows:1 windows x86 arch:x86

50dd9a1d1454473a2d65d612bbbbfbe6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
GetTextMetricsA
MoveToEx
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor

kernel32

CloseHandle
CopyFileA
CreateFileA
EnumResourceNamesA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileAttributesA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
GetDateFormatA
GetSystemDirectoryA
RtlMoveMemory

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
OleInitialize
ProgIDFromCLSID
CoTaskMemFree

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

CheckRadioButton
ClientToScreen
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DestroyIcon
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
EnableWindow
FillRect
GetClientRect
GetDC
GetDlgItem
GetMenu
GetMenuItemInfoA
GetSysColor
GetSysColorBrush
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
IsDialogMessageA
IsWindow
LoadIconA
LoadImageA
MapDialogRect
MessageBeep
MessageBoxA
PeekMessageA
PostMessageA
RedrawWindow
ReleaseDC
ScreenToClient
SendMessageA
SetFocus
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateMessage
DialogBoxParamA
GetAsyncKeyState
GetSystemMetrics
GetWindow
MoveWindow
keybd_event

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

comctl32

InitCommonControls
ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetIcon
ImageList_LoadImageA

..\ft\dwin

SETTOOLTIP

Exports

Exports

BROWSEFORFOLDER
GETSYSFILEVER
INITCOMCTL32
TAX165R

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50dd9a1d1454473a2d65d612bbbbfbe6

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

shell32

version

comctl32

..\ft\dwin

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 88KB

.data Size: 7KB - Virtual size: 9KB

.link Size: 4KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.rloc Size: 4KB - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 88KB

.data
Size: 7KB - Virtual size: 9KB

.link
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rloc
Size: 4KB - Virtual size: 4KB