417d62415b82d007885386eda10958c0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

417d62415b82d007885386eda10958c0_NeikiAnalytics.exe
Size

260KB
MD5

417d62415b82d007885386eda10958c0
SHA1

ea8e28711d8391bfc3da1a1247c075aebed74388
SHA256

78ea04077de96cd32fefda91988dc7fe4d731b8fa010e54a4f0c71f263e54f1c
SHA512

31eab5aecc38b6b287becfca489e1ca06057bda7dcb31908a69ff1158948a09bce9e97eef7655922dfbd66c1763c4fbc79da8a11972190203b5ac8931f20159c
SSDEEP

3072:HqEUkkmHhgYgRPFTdnUS3oq6ieU1GVmKz1weazchSGxh5hrXKHbaLCh:HqvkX+VtTdUSYq6i1GEKosxVra7N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
417d62415b82d007885386eda10958c0_NeikiAnalytics.exe

Files

417d62415b82d007885386eda10958c0_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

48146060ec6a5d8a2deb5a0181d1e8e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\SN5103_OEM_2\Install\x64\Release\EasyInstallenus.pdb

Imports

kernel32

RtlLookupFunctionEntry
RtlUnwindEx
Sleep
ExitProcess
RaiseException
RtlPcToFileHeader
HeapSize
HeapQueryInformation
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapFree
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
HeapAlloc
GetCommandLineA
FlsSetValue
lstrlenA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
FormatMessageW
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
lstrlenW
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalUnlock
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetCurrentProcessId
CloseHandle
GlobalAddAtomW
GlobalFindAtomW
LoadLibraryA
GetLastError
GetVersionExA
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
HeapSetInformation
GetProcAddress

user32

LoadCursorW
GetSysColorBrush
DestroyMenu
ShowWindow
SetWindowTextW
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnregisterClassW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetMenuItemBitmaps
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetClassInfoW
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
GetMessageW
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
GetWindowLongW
GetMenu
PtInRect
CopyRect
CallWindowProcW
DefWindowProcW
SendMessageW
GetDlgCtrlID
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
GetMenuCheckMarkDimensions

gdi32

DeleteDC
GetStockObject
GetDeviceCaps
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SelectObject

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48146060ec6a5d8a2deb5a0181d1e8e6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 10KB - Virtual size: 33KB

.pdata Size: 10KB - Virtual size: 9KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 10KB - Virtual size: 33KB

.pdata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 9KB - Virtual size: 9KB