3535db0ae153c72f98a317db8748b6b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3535db0ae153c72f98a317db8748b6b0_NeikiAnalytics.exe
Size

1.6MB
MD5

3535db0ae153c72f98a317db8748b6b0
SHA1

b48d5e8427caad92a25be347b19df39d39341dd1
SHA256

cc7399c4f6908ad7ca4e56eba378120c705c0538e9a09b83febf6c786e286f3e
SHA512

93b0329fdc24f2ead1bd46385826ea00b43987ee5b838f19a43293ed7a2d6352af4557a631be8bfa140c08719afca83c4ba0f0b61d36188df3700a32189a9754
SSDEEP

24576:gNL0ykds0Oeo3baNSuEk4e1C7FBNL6iM0:ryejyGSuGe1C7FBt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3535db0ae153c72f98a317db8748b6b0_NeikiAnalytics.exe

Files

3535db0ae153c72f98a317db8748b6b0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

b93ef07ff0bccfbccced28352ca282e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioRead
mmioDescend
mmioGetInfo
mmioAscend
timeGetTime
timeSetEvent
mmioCreateChunk
mmioOpenA
mmioSeek
mmioSetInfo
mmioAdvance
mmioClose
mmioWrite
timeKillEvent

dsound

ord1

wsock32

WSAAsyncSelect
recv
send
htons
ioctlsocket
connect
WSAGetLastError
WSAStartup
socket
setsockopt
closesocket
WSACleanup

imm32

ImmGetDefaultIMEWnd

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
ExitThread
CloseHandle
CopyFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
GetLastError
Sleep
GetTickCount
LockResource
SizeofResource
LoadResource
FindResourceA
TerminateThread
MultiByteToWideChar
CreateThread
ReadFile
GetFileSize
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetModuleFileNameA
SetUnhandledExceptionFilter
DeleteFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetVersion
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LCMapStringW
LCMapStringA
SetEndOfFile
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
VirtualQuery
InterlockedExchange
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
TerminateProcess
ExitProcess
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
WideCharToMultiByte
WriteFile
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
lstrcpynA
GetModuleHandleA

user32

SetWindowPos
SystemParametersInfoA
wsprintfA
MessageBoxA
GetWindowRect
ClientToScreen
GetClientRect
SetRect
ShowCursor
CopyRect
GetForegroundWindow
ShowWindow
CheckDlgButton
GetDlgItem
SetWindowTextA
InvalidateRect
LoadImageA
MoveWindow
GetSystemMetrics
AdjustWindowRect
SetWindowLongA
GetWindowLongA
DispatchMessageA
TranslateMessage
PeekMessageA
DefWindowProcA
PostQuitMessage
ClipCursor
DestroyWindow
UpdateWindow
CreateWindowExA
RegisterClassA
LoadCursorA
SetForegroundWindow
FindWindowA
DrawTextA
GetAsyncKeyState
ChangeDisplaySettingsA
FillRect

gdi32

CreateCompatibleDC
StretchBlt
DeleteDC
SetPixel
GetDeviceCaps
GetPixel
TextOutW
CreateSolidBrush
SetTextAlign
SelectObject
SetBkMode
SetTextColor
TextOutA
CreateFontA
GetTextExtentPoint32A
GetObjectA
DeleteObject

msvfw32

ICSendMessage
ICLocate
ICDecompress
ICClose

avifil32

AVIStreamOpenFromFileA
AVIStreamLength
AVIStreamReadFormat
AVIStreamRelease
AVIStreamRead
AVIFileExit
AVIStreamInfoA
AVIFileInit

dbghelp

MiniDumpWriteDump

fmod

_FSOUND_Init@12
_FSOUND_SetMixer@4
_FSOUND_SetPaused@8
_FSOUND_Stream_Stop@4
_FSOUND_Stream_Open@16
_FSOUND_Stream_Play@8
_FSOUND_SetVolume@8
_FSOUND_Stream_Close@4
_FSOUND_Close@0
_FSOUND_GetVersion@0
_FSOUND_Stream_SetBufferSize@4

ddraw

DirectDrawEnumerateExA
DirectDrawCreateEx

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 380KB - Virtual size: 62.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b93ef07ff0bccfbccced28352ca282e7

Headers

File Characteristics

Imports

winmm

dsound

wsock32

imm32

kernel32

user32

gdi32

msvfw32

avifil32

dbghelp

fmod

ddraw

Sections

.text Size: 668KB - Virtual size: 667KB

.rdata Size: 603KB - Virtual size: 602KB

.data Size: 380KB - Virtual size: 62.8MB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 668KB - Virtual size: 667KB

.rdata
Size: 603KB - Virtual size: 602KB

.data
Size: 380KB - Virtual size: 62.8MB

.rsrc
Size: 5KB - Virtual size: 4KB