8a4901dbc8cf316e3f90807aa3c26b10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8a4901dbc8cf316e3f90807aa3c26b10_NeikiAnalytics.exe
Size

572KB
MD5

8a4901dbc8cf316e3f90807aa3c26b10
SHA1

8735bba0d25a6a97067192e597529ed9dcc29bea
SHA256

03846194b3c1c2ca66254052936c43f2b96b4f2f10d80792735eadda14d4fabb
SHA512

29c485aa28cbf6c739493eaefade219141bf9f4c61b7487c951c66521808052bfcf3981ef8b523127040f234f08d33f428e434359ace8bee24dbc736f425db85
SSDEEP

12288:kJbHJv3Lfgjpx5Ama/vvzHOo+VRuqBjvrEH7v:wN3LAb52vv0RzrEH7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a4901dbc8cf316e3f90807aa3c26b10_NeikiAnalytics.exe

Files

8a4901dbc8cf316e3f90807aa3c26b10_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

87a33f0db69ed59365a0ad70d08397e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imagehlp

CheckSumMappedFile

shlwapi

PathIsUNCW
PathCombineW
PathFindExtensionW
PathStripToRootW
PathFindFileNameW
PathFileExistsW
UrlUnescapeW

msi

ord145
ord74

wininet

InternetAttemptConnect
InternetCanonicalizeUrlW
InternetCrackUrlW

kernel32

HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
HeapSize
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentProcessId
GetOEMCP
GetCPInfo
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateThread
CloseHandle
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingW
CreateFileW
SetFileAttributesW
GetFileAttributesW
FreeLibrary
LockResource
LoadResource
FindResourceW
LoadLibraryW
SizeofResource
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrlenA
WriteFile
GetLocalTime
ReadFile
Sleep
GetLastError
IsBadWritePtr
IsBadReadPtr
GetTickCount
DeleteFileW
GetTempPathW
InterlockedDecrement
TerminateThread
WaitForSingleObject
GetLocaleInfoW
lstrcpyW
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetWindowsDirectoryW
GetExitCodeProcess
CreateProcessW
CreateDirectoryW
ExitThread
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
RtlUnwind
GlobalGetAtomNameW
GetTempFileNameW
GetFileTime
FileTimeToLocalFileTime
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
ReleaseMutex
CreateMutexW
LoadLibraryExW
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
DeleteCriticalSection
GetProcAddress
InitializeCriticalSection
RaiseException
GlobalFindAtomW
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
GlobalAddAtomW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
SetLastError
MulDiv
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
FreeResource
GlobalFree
GetCurrentThread
GetCurrentThreadId
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
GetModuleFileNameW
GetModuleHandleW

user32

SetMenu
TranslateAcceleratorW
DestroyMenu
GetMenuItemInfoW
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
CharNextW
InvalidateRgn
CopyAcceleratorTableW
SetRect
WindowFromPoint
ReleaseCapture
SetCapture
InvalidateRect
SetWindowRgn
IsRectEmpty
FindWindowW
SystemParametersInfoW
CharUpperW
wsprintfW
InflateRect
MoveWindow
SetWindowTextW
IsDialogMessageW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoW
SetRectEmpty
UnregisterClassW
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PtInRect
SetFocus
WaitMessage
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
ReleaseDC
GetDC
SetMenuItemBitmaps
GetFocus
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowOwnedPopups
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
UnpackDDElParam
RegisterClipboardFormatW
PostThreadMessageW
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDlgItem
PostMessageW
PostQuitMessage
LoadImageW
GetDlgCtrlID
BringWindowToTop
LoadIconW
GetSystemMetrics
IsIconic
DrawIcon
IsWindow
GetDesktopWindow
KillTimer
SetTimer
UpdateWindow
GetWindowRect
GetSysColor
EnableWindow
GetParent
GetClientRect
SendMessageW
DrawTextW
LoadBitmapW
CopyRect
LoadStringW
LoadCursorW
SetCursor
ShowWindow
MessageBoxW
RegisterClassW
ScrollWindow

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetPixel
CreateSolidBrush
GetMapMode
CreateEllipticRgn
LPtoDP
Ellipse
GetRgnBox
GetBkColor
GetTextColor
GetTextExtentPoint32W
CreateCompatibleBitmap
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
CreateBitmap
GetDeviceCaps
BitBlt
PatBlt
CreateCompatibleDC
CreateFontIndirectW
GetStockObject
GetObjectW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegCreateKeyExW
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
GetUserNameW
LookupAccountNameW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenSCManagerW
CloseServiceHandle
RegCloseKey
RegQueryValueExW
GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
GetSecurityDescriptorDacl
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegEnumValueW
RegOpenKeyExW

shell32

DragFinish
ShellExecuteW
DragQueryFileW

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17
ImageList_Draw
ImageList_GetImageInfo

oledlg

OleUIBusyW

ole32

CLSIDFromString
CoTaskMemFree
OleRun
OleInitialize
CoRegisterMessageFilter
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromProgID
CoCreateInstance

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantClear
SysAllocString
SysFreeString
VariantCopy
SysAllocStringLen
SysStringLen
VariantChangeType
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
GetErrorInfo
SafeArrayCreate

ws2_32

closesocket
htonl
htons
inet_addr
accept
socket
select
bind
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
WSAStartup
WSAGetLastError
WSACleanup
gethostbyname

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

AcquireKey
PCULauncher
VerifynUpdate

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_1
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87a33f0db69ed59365a0ad70d08397e5

Headers

File Characteristics

Imports

imagehlp

shlwapi

msi

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

ws2_32

oleacc

Exports

Exports

Sections

.text Size: 332KB - Virtual size: 331KB

.rdata Size: 92KB - Virtual size: 90KB

.data Size: 12KB - Virtual size: 31KB

.data_1 Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 48KB - Virtual size: 46KB

.text
Size: 332KB - Virtual size: 331KB

.rdata
Size: 92KB - Virtual size: 90KB

.data
Size: 12KB - Virtual size: 31KB

.data_1
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 48KB - Virtual size: 46KB