8a1ecaabb4bd3b5ad0a645c7478aa010_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8a1ecaabb4bd3b5ad0a645c7478aa010_NeikiAnalytics.exe
Size

132KB
MD5

8a1ecaabb4bd3b5ad0a645c7478aa010
SHA1

78a74224284d9951a01d0aebc425866f7b9c5282
SHA256

31b79322b9ad4c02f3d9a34efe1f9bfae966aad3147bf0cd1c94be99dd3db68b
SHA512

94759887ab6d4297abd0558e33494b737dd82927e85b63686bf7f4bf218d45974d72285cb7d7b0e7afb90561f7271b560c62d123ce8756aaff3caeb53abe09ac
SSDEEP

3072:Bsh6IWhQQjgiRYHyvAP1ideIU1KEXds/3PSxnO9/V:BlhQQk+C0MIUE2K/3knO9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a1ecaabb4bd3b5ad0a645c7478aa010_NeikiAnalytics.exe

Files

8a1ecaabb4bd3b5ad0a645c7478aa010_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

82e311d1992c8933a84bdfe05be07071

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolderW

user32

SetMenuInfo
RegisterHotKey
GetMenuCheckMarkDimensions
GetMouseMovePointsEx
ShowScrollBar
IsClipboardFormatAvailable
PhysicalToLogicalPoint
GetFocus

urlmon

CoInternetGetSecurityUrl

shlwapi

PathFindExtensionA

kernel32

CreateToolhelp32Snapshot
GetCommandLineW
CloseHandle
ReleaseMutex
GetLastError
GetProcessTimes
FreeResource
GetConsoleHistoryInfo
AreFileApisANSI
CreateMutexW
WaitForSingleObject
PulseEvent
GetTickCount64

oleaut32

VarDateFromI2

advapi32

RegFlushKey

comctl32

CreateStatusWindowW

gdi32

CreateEllipticRgn
SetSystemPaletteUse
GdiSetBatchLimit
DeleteObject
CreatePolygonRgn

imm32

ImmSetCompositionStringW

mprapi

MprInfoBlockAdd
MprConfigGetGuidName

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt1
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt2
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VISO
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt4
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82e311d1992c8933a84bdfe05be07071

Headers

DLL Characteristics

File Characteristics

Imports

shell32

user32

urlmon

shlwapi

kernel32

oleaut32

advapi32

comctl32

gdi32

imm32

mprapi

Sections

.text Size: 15KB - Virtual size: 14KB

.text1 Size: 512B - Virtual size: 102B

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 5KB

.crt1 Size: 14KB - Virtual size: 14KB

.crt2 Size: 25KB - Virtual size: 25KB

VISO Size: 22KB - Virtual size: 22KB

.crt4 Size: 11KB - Virtual size: 10KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 15KB - Virtual size: 14KB

.text1
Size: 512B - Virtual size: 102B

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 5KB

.crt1
Size: 14KB - Virtual size: 14KB

.crt2
Size: 25KB - Virtual size: 25KB

VISO
Size: 22KB - Virtual size: 22KB

.crt4
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 32KB - Virtual size: 31KB