3d5dbffe2a505d0f7afd204934d498a0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3d5dbffe2a505d0f7afd204934d498a0_NeikiAnalytics.exe
Size

1.7MB
MD5

3d5dbffe2a505d0f7afd204934d498a0
SHA1

39774375d6d58911bf9636afce68413527907bb7
SHA256

8a29ef232fb94b197572ce365ab690107875724be91108999e2b4fd58595ee11
SHA512

3e41e0854163fb4c22e9900e4ff2d6c92190c792f9f0612ee03e5001314cf56bc089beef7e5105a8f6cd3b6a0df21057d4e9ccf37c65517db72f8b075e1f5825
SSDEEP

49152:1k7Ai/F+n6Pnu032sqk/3m3PM0RKeXI5ipbZ8/h6+XqNBBav:1sAi/F+aysk18/h6tNB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5dbffe2a505d0f7afd204934d498a0_NeikiAnalytics.exe

Files

3d5dbffe2a505d0f7afd204934d498a0_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

8c17abaae301b624c950062651c1036a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miller\Documents\Projects\ImgV64\Release\ImgV64.pdb

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
ExitProcess
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
GetFileType
SetStdHandle
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetStartupInfoW
RtlUnwind
WaitForSingleObjectEx
SleepConditionVariableCS
WakeConditionVariable
InitializeConditionVariable
GetCPInfo
CompareStringEx
LCMapStringEx
GetLocaleInfoEx
TryAcquireSRWLockExclusive
GetStringTypeW
RaiseException
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetCurrentDirectoryW
VirtualProtect
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GetProfileIntW
GetThreadLocale
GetStringTypeExW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFileSize
FlushFileBuffers
DeleteFileW
CreateFileW
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileW
SetFileTime
SizeofResource
GetFullPathNameW
GetFileTime
GetFileAttributesW
GetDiskFreeSpaceW
SystemTimeToTzSpecificLocalTime
LocalAlloc
GetTickCount64
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
GlobalGetAtomNameW
GetCurrentProcessId
ResumeThread
SuspendThread
SetThreadPriority
CompareStringW
lstrcmpW
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
LoadLibraryA
CopyFileW
FormatMessageW
LocalFree
GlobalSize
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
GetACP
FindClose
GetBinaryTypeW
FindNextFileW
FindFirstFileW
SetCurrentDirectoryW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExW
WaitForSingleObject
TerminateThread
GetExitCodeThread
SetEvent
CloseHandle
CreateThread
CreateEventW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetCurrentThreadId
GetModuleHandleW
SetLastError
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpynW
GetUserDefaultUILanguage
GetModuleFileNameW
GlobalFree
MoveFileW
GetTempFileNameW
GetTempPathW
MulDiv
WideCharToMultiByte
GlobalAlloc
VerifyVersionInfoW
VerSetConditionMask
GlobalUnlock
GetLastError
GlobalLock
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
WriteConsoleW

user32

GetClassInfoExW
GetClassInfoW
RegisterClassW
GetMessageTime
RegisterWindowMessageW
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamW
DestroyWindow
IsDialogMessageW
GetWindow
GetWindowTextLengthW
GetWindowTextW
IsWindowEnabled
SetFocus
GetDlgCtrlID
GetDlgItem
MoveWindow
ShowWindow
GetMenuStringW
SendDlgItemMessageA
UnregisterClassW
CopyIcon
SetDlgItemTextW
SetWindowTextW
EndDialog
DrawIcon
LoadIconW
DispatchMessageW
GetMessageW
PeekMessageW
ScreenToClient
WindowFromPoint
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowPlacement
EndPaint
BeginPaint
ValidateRect
DefWindowProcW
GetParent
SetMenu
CallNextHookEx
SetPropW
CallWindowProcW
RemovePropW
GetPropW
UnhookWindowsHookEx
SetWindowsHookExW
IntersectRect
CreatePopupMenu
DeleteMenu
SetCapture
SendMessageW
PostMessageW
GetWindowLongW
SetWindowLongW
ClientToScreen
GetMenuState
LoadMenuW
GetDesktopWindow
InsertMenuW
AppendMenuW
GetMenuDefaultItem
DrawEdge
DrawTextW
GetMessagePos
DrawStateW
GetMenuItemID
GetSubMenu
GetMenu
WindowFromDC
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetKeyState
GetCapture
TrackPopupMenu
GetForegroundWindow
GetMenuInfo
GetKeyNameTextW
MapVirtualKeyW
CopyAcceleratorTableW
CopyImage
GetMenuItemInfoW
GetMenuItemRect
SetMenuInfo
IsMenu
GetWindowDC
SetForegroundWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
AdjustWindowRectEx
MessageBoxW
MapWindowPoints
EqualRect
GetClassLongW
GetTopWindow
GetLastActivePopup
CreateWindowExW
SetLayeredWindowAttributes
EnableWindow
InvalidateRect
UpdateWindow
GetClassNameW
SetCursor
DestroyCaret
IsChild
GetFocus
MenuItemFromPoint
KillTimer
GetCursorPos
DestroyMenu
GetSystemMenu
GetWindowRect
RedrawWindow
SystemParametersInfoW
GetIconInfo
DestroyIcon
GetDC
RegisterClipboardFormatW
SetRectEmpty
LoadCursorW
GetClientRect
IsRectEmpty
OffsetRect
ReleaseDC
GetSysColor
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
ClipCursor
CreateCaret
SetCaretPos
ShowCaret
PtInRect
SetTimer
HideCaret
InflateRect
EnumDisplaySettingsW
SetWindowPos
ChangeDisplaySettingsW
IsIconic
ModifyMenuW
DrawMenuBar
FillRect
CopyRect
IsWindow
LoadBitmapW
SetRect
MonitorFromWindow
GetMonitorInfoW
GetSystemMetrics
GetMenuItemCount
SetWindowRgn
GetDCEx
IsZoomed
RealChildWindowFromPoint
SetScrollInfo
GetSysColorBrush
PostThreadMessageW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
LockWindowUpdate
InSendMessage
SetParent
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetScrollInfo
WinHelpW
TranslateMessage
BringWindowToTop
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
GetWindowThreadProcessId
UnpackDDElParam
ReuseDDElParam
CheckMenuItem
EnableMenuItem
CharUpperW

gdi32

SetTextAlign
MoveToEx
ExtTextOutW
GetTextExtentPointW
GetCurrentPositionEx
GetTextColor
CreatePatternBrush
CreateSolidBrush
SetWindowOrgEx
GetNearestColor
RoundRect
TextOutW
CreatePen
Rectangle
UnrealizeObject
SetBrushOrgEx
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
PtVisible
RectVisible
Escape
GetWindowOrgEx
StretchBlt
CopyMetaFileW
CreateDCW
PatBlt
SetTextColor
ExcludeClipRect
GetClipBox
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
ExtSelectClipRgn
GetTextAlign
SetMapMode
SetLayout
SetROP2
StartDocW
PolyDraw
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateEllipticRgn
Ellipse
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetMapMode
SetRectRgn
CreateFontW
GetCharWidthW
StretchDIBits
GetRgnBox
GetCurrentObject
GetPixel
SetBkColor
CreateBitmap
BitBlt
CreateCompatibleBitmap
GetLayout
SetPixel
DeleteDC
GetStockObject
SelectObject
CreateCompatibleDC
CreateDIBSection
GetObjectA
CreateFontIndirectW
GetTextExtentPoint32W
GetBkColor
GetTextMetricsW
DPtoLP
CreateDIBitmap
GetObjectW
GetDeviceCaps
LPtoDP
GetDIBits
SetBkMode
DeleteObject

winspool.drv

OpenPrinterW
GetJobW
ClosePrinter
DocumentPropertiesW

advapi32

SetFileSecurityW
RegCloseKey
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegEnumValueW
GetUserNameW
GetFileSecurityW
RegQueryValueW

shell32

ShellExecuteW
SHGetSpecialFolderPathW
DragQueryFileW
ShellExecuteExW
SHFileOperationW
DragFinish
SHAddToRecentDocs
ExtractIconW
SHGetFileInfoW

comctl32

InitCommonControlsEx
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Add
ImageList_Replace
ImageList_GetImageCount
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Draw

shlwapi

UrlCombineW
SHCreateStreamOnFileW
ord12
PathFileExistsW
PathIsURLW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathCombineW
AssocGetPerceivedType
UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW

uxtheme

IsAppThemed
GetThemePartSize
CloseThemeData
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData

ole32

OleLockRunning
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
CoInitializeEx
CLSIDFromProgID
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoUninitialize
OleDuplicateData
StringFromCLSID
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

heif

heif_context_read_from_memory_without_copy
heif_context_get_number_of_top_level_images
heif_context_alloc
heif_image_create
heif_context_get_list_of_top_level_image_IDs
heif_check_filetype
heif_context_encode_image
heif_encoding_options_free
heif_encoding_options_alloc
heif_encoder_set_lossy_quality
heif_context_get_encoder_for_format
heif_encoder_release
heif_image_get_plane
heif_image_add_plane
heif_context_free
heif_image_release
heif_decode_image
heif_image_handle_has_alpha_channel
heif_image_handle_get_height
heif_image_handle_get_width
heif_image_handle_release
heif_context_write
heif_context_get_image_handle
heif_context_get_primary_image_ID

gdiplus

GdipGetImageHeight
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCloneBitmapAreaI
GdipGetImagePixelFormat
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSaveImageToStream
GdipGetImageWidth
GdipSaveAdd
GdipLoadImageFromStream
GdipBitmapConvertFormat
GdipSetPropertyItem
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipGetImageFlags
GdipSetImagePalette
GdipGetImageDecodersSize
GdipGetImageDecoders
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveAddImage
GdipCreateBitmapFromStreamICM
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipCreateBitmapFromScan0
GdiplusStartup
GdiplusShutdown
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGraphicsClear
GdipCreateBitmapFromHBITMAP
GdipCloneBitmapArea
GdipCreateMatrix
GdipDeleteMatrix
GdipCreateEffect
GdipDeleteEffect
GdipSetEffectParameters
GdipDrawImageFX
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipFillEllipse
GdipSetTextRenderingHint
GdipDrawString
GdipBitmapSetResolution
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipSetImageAttributesWrapMode
GdipDrawImageRectRect
GdipImageRotateFlip
GdipRemovePropertyItem
GdipSetCompositingMode
GdipRecordMetafileFileName
GdipGetDC
GdipDrawImageRectI
GdipSaveImageToFile
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawImageRect
GdipDrawImageRectRectI
GdipGetImageType
GdipSetImageAttributesColorMatrix
GdipBitmapGetPixel
GdipBitmapSetPixel
GdipCreateHICONFromBitmap
GdipCreateBitmapFromGdiDib
GdipCreateRegionRectI
GdipDeleteRegion
GdipCombineRegionRectI
GdipFillRegion
GdipCreateFromHDC
GdipDrawImageI
GdipCreatePath
GdipDeletePath
GdipAddPathPolygonI
GdipCreatePathGradientFromPath
GdipSetPathGradientPresetBlend
GdipFillPath
GdipFillRectangleI
GdipCreateTexture
GdipSetPageUnit
GdipCreateHBITMAPFromBitmap
GdipPlayMetafileRecord
GdipCreateMetafileFromWmf
GdipEnumerateMetafileDestRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipResetImageAttributes
GdipSetImageAttributesGamma
GdipGetImageRawFormat
GdipGetImageDimension
GdipGetPropertyCount
GdipGetPropertyIdList
GdipCreateBitmapFromStream

oleacc

CreateStdAccessibleObject
LresultFromObject

wininet

InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle
InternetOpenUrlW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c17abaae301b624c950062651c1036a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

heif

gdiplus

oleacc

wininet

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 277KB - Virtual size: 276KB

.data Size: 22KB - Virtual size: 44KB

.rsrc Size: 58KB - Virtual size: 58KB

.reloc Size: 74KB - Virtual size: 73KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 277KB - Virtual size: 276KB

.data
Size: 22KB - Virtual size: 44KB

.rsrc
Size: 58KB - Virtual size: 58KB

.reloc
Size: 74KB - Virtual size: 73KB