643ea6334a40ef474e8866c7ef538ad0_NeikiAnalytics[.]exe

General

Target

643ea6334a40ef474e8866c7ef538ad0_NeikiAnalytics.exe
Size

87KB
MD5

643ea6334a40ef474e8866c7ef538ad0
SHA1

e1eeeb94885d2e1922b63aff060325e5f3ca1224
SHA256

3772ca1b4e14862c333c2cca4bfdc8e903f893472bf433f3b38fd943f508fb21
SHA512

1579cf4480dbb0352243cf4e12bdcc5fd3af99ac38793f1270ce4c0bf10baac7f45bb7f91a18fd681dfcdb4a5a2ea89d76d2652f3ce6780b7807067e8fc2fe81
SSDEEP

1536:MEu/C9kgLj+imedOvCbDX/fOmB/T+7OUf+:MELigL9o6bDX/fOmB/T+7OUf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
643ea6334a40ef474e8866c7ef538ad0_NeikiAnalytics.exe

Files

643ea6334a40ef474e8866c7ef538ad0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

d95652b4077f0bddeb9892fc4f6a83d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetLastError
FindNextFileW
FindFirstFileW
GetModuleHandleW
CloseHandle
WriteFile
CreateFileW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateProcessW
GetModuleFileNameW
LoadLibraryW
GetFileAttributesW
GetWindowsDirectoryW
lstrcatW
GetTempPathW
SetFileAttributesW
GetExitCodeProcess
OpenProcess
Sleep
SetCurrentDirectoryW
GetCommandLineW
HeapSize
GetProcAddress
DeleteFileW
RemoveDirectoryW
GetSystemDirectoryW
FreeLibrary
ExitThread
ResumeThread
CreateThread
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapAlloc
ExitProcess
HeapFree
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind

user32

DialogBoxParamW
SetDlgItemTextW
MessageBoxW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d95652b4077f0bddeb9892fc4f6a83d7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 6KB - Virtual size: 9KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 6KB - Virtual size: 9KB