22be17f7355033189e212ab7359f76b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

22be17f7355033189e212ab7359f76b0_NeikiAnalytics.exe
Size

164KB
MD5

22be17f7355033189e212ab7359f76b0
SHA1

3b31b1b267d8e90950b98fd322b600eb45c95f38
SHA256

9a26c76f186cd9ae568a2c1d6b85f634e1a8d5ee651a5abdd8571104f4a1ed7d
SHA512

b875d6fe053671f58731d87eaffb4d3aa818e1fdcabc407c03739b733534cfdfe6410f46d7449594ba927bfa3051883947c0d6799f37518b7732c2fb198db9fa
SSDEEP

3072:TxkWHUa24jxm4sRcReDD7kneHCwBAF2kIcwetjgob:TxkWHy0mLn6eHvBrjcV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22be17f7355033189e212ab7359f76b0_NeikiAnalytics.exe

Files

22be17f7355033189e212ab7359f76b0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

f7254b9dafea8731bc5c2cd1b5513221

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
CloseHandle
CreateFileA
GetLocalTime
OutputDebugStringA
lstrlenA
GetTickCount
WriteFile
ReadFile
SetFilePointer
HeapFree
HeapAlloc
LocalFree
LocalUnlock
LocalLock
LocalAlloc
SetEndOfFile
CopyFileA
GetModuleFileNameA
FreeLibrary
lstrcatA
GetProcAddress
lstrcmpA
Sleep
lstrcmpiA
SetFileTime
SystemTimeToFileTime
GetSystemTime
HeapDestroy
HeapCreate
CreateThread
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
SetLocalTime
HeapReAlloc
VirtualAlloc
FindClose
FindFirstFileA
DeleteFileA
FindNextFileA
LoadLibraryA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

user32

MessageBeep
wsprintfA
CharUpperA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Exports

Exports

API_GetPrivateProfileInt
API_GetPrivateProfileString
API_WritePrivateProfileString
LockRule_AbortOperation
LockRule_CastorDecodeEvent
LockRule_CheckLicenseCode
LockRule_CheckPassword
LockRule_CheckUsernameAndPassword
LockRule_DeleteEvent
LockRule_EndSession
LockRule_EnumRoomsInDataFile
LockRule_EnumRoomsInEventFile
LockRule_EnumRoomsInOpenDoorFile
LockRule_ExLoadLockWithProgram
LockRule_GetEventHeader
LockRule_GetLoginMode
LockRule_GetSingleEvent
LockRule_KicServer
LockRule_LoadLockWithData
LockRule_LoadLockWithProgram
LockRule_MultiOpenDoor
LockRule_NewSession
LockRule_ReadDiagnostics
LockRule_ReadEventsFromLock
LockRule_ReopenEventDataFile
LockRule_ReopenPasswordFile
LockRule_ReopenRoomsDataFile
LockRule_SetClockInLock
LockRule_SetCommParameters
LockRule_SetContactCardType
LockRule_SetDataDirPath
LockRule_SetDebugFlag
LockRule_SetDemoVersion
LockRule_SetExtraParameters
LockRule_SetFilenames
LockRule_SetTimeoutPar
LockRule_TestLitiumBattery
LockRule_UseActiveSync
LockRule_WriteDiagnostics

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CommonD
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7254b9dafea8731bc5c2cd1b5513221

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 18KB

.CommonD Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 464B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 18KB

.CommonD
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 464B

.reloc
Size: 8KB - Virtual size: 4KB