6328be693b23f0d9234a56b8d70356d0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

6328be693b23f0d9234a56b8d70356d0_NeikiAnalytics.exe
Size

3.0MB
MD5

6328be693b23f0d9234a56b8d70356d0
SHA1

b2e32390b732620d9322d9beb136571d5b3dce23
SHA256

a1bf02083a3739ccde921595d7f5f25f0209300414512c93054f03e16857c011
SHA512

f6080fa59d6859300718de425644f570ba48a2006de602b55e6fc79686acf5961c9eb487e180747fb83d6d442a29d0e904702a924d6678ad1900862c395e2b16
SSDEEP

98304:4kac4KpyJ+++z0mnmnM4aqTPKrb4l4RQpe:Cc4KwM4aWyrb4lTpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6328be693b23f0d9234a56b8d70356d0_NeikiAnalytics.exe

Files

6328be693b23f0d9234a56b8d70356d0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

fc830add8a06bd59343a45d51e2793f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
LoadLibraryExA
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
ExitProcess
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
GetCommandLineA
VirtualQuery
GetSystemInfo
RtlUnwind
OutputDebugStringW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateEventW
SetEvent
GetCurrentProcessId
lstrcmpA
GetCurrentThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalFree
LoadLibraryW
GetModuleHandleA
SetLastError
OutputDebugStringA
GetACP
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
GetWindowsDirectoryW
GetCurrentProcess
GetFileSizeEx
FindClose
FindNextFileW
FindFirstFileW
lstrlenW
lstrcmpW
VirtualProtect
LoadLibraryExW
GetTimeZoneInformation
GetModuleHandleW
GetProcAddress
GetTickCount
GetVolumeInformationW
GetDiskFreeSpaceExW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetComputerNameW
GetLocalTime
DeleteFileW
GetTempPathW
CloseHandle
ReleaseMutex
GetVersionExW
CreateDirectoryW
GetPrivateProfileStringW
CreateMutexW
Sleep
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount

user32

SetCapture
MapDialogRect
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
CharUpperW
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
TranslateMessage
GetMessageW
RegisterClipboardFormatW
PostQuitMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
ReleaseCapture
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
InvalidateRect
EnableWindow
RegisterWindowMessageW
LoadIconW
BeginDeferWindowPos
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
SetWindowContextHelpId
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
IntersectRect
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetRect
IsRectEmpty
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
SendMessageW
GetSystemMetrics
GetClientRect
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
DrawMenuBar
GetMenuState
GetWindowRect
WaitForInputIdle
KillTimer
SetTimer
FillRect
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterDeviceNotificationW
MonitorFromRect
LoadImageW
GetCursorPos
TrackPopupMenu
CreatePopupMenu
CreateMenu
InsertMenuItemW
wsprintfW
ModifyMenuW
EnableMenuItem
RemoveMenu
AppendMenuW
SetScrollRange
GetScrollPos
SetScrollPos
FrameRect
CopyRect
SetCursor
LoadCursorW
SetWindowPos
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetMenuItemCount
GetMenuItemID
GetParent
OffsetRect
SetRectEmpty
SendDlgItemMessageA
AdjustWindowRect
GetWindowInfo
UnregisterClassW
PrintWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromWindow
ReleaseDC
GetDC
SetPropW
SystemParametersInfoW

gdi32

SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
GetRgnBox
ExtTextOutW
TextOutW
SetViewportOrgEx
SetMapMode
SetViewportExtEx
SetBkMode
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetClipBox
Escape
CreateRectRgnIndirect
CreateBitmap
SetBkColor
CreatePatternBrush
GetBkColor
GetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
SetTextColor
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
EnumFontFamiliesExW
CreateCompatibleDC
SetBitmapBits
BitBlt
CreateDIBSection
DeleteObject
SelectObject
SetDIBColorTable
GetObjectW
GetBitmapBits

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

DeregisterEventSource
RegSetValueExW
RegCloseKey
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
ReportEventW
RegisterEventSourceW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW

shell32

Shell_NotifyIconW
ord680
ShellExecuteW
CommandLineToArgvW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
UrlCreateFromPathW
PathFindExtensionW
SHDeleteKeyW
PathStripToRootW

uxtheme

SetWindowTheme

ole32

CoGetClassObject
CLSIDFromString
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoInitialize
OleFlushClipboard

oleaut32

SysAllocStringLen
VariantChangeType
VariantCopy
LoadRegTypeLi
DispCallFunc
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayDestroy
VariantClear
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
SafeArrayGetElement
SysFreeString
SysAllocString
VariantInit

gdiplus

GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageWidth
GdipCloneImage
GdipCreateBitmapFromScan0

winmm

mciSendCommandW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

cfgmgr32

CM_Get_Device_IDW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fc830add8a06bd59343a45d51e2793f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winmm

version

cfgmgr32

setupapi

oleacc

Sections

.text Size: 743KB - Virtual size: 742KB

.rdata Size: 235KB - Virtual size: 235KB

.data Size: 14KB - Virtual size: 50KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 743KB - Virtual size: 742KB

.rdata
Size: 235KB - Virtual size: 235KB

.data
Size: 14KB - Virtual size: 50KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB