928914f75db076f76273443271703e50_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

928914f75db076f76273443271703e50_NeikiAnalytics.exe
Size

320KB
MD5

928914f75db076f76273443271703e50
SHA1

58f8788611131e714cba11faa3c7ebe93e6fac3f
SHA256

e67636f68eb769b32c13e9162e3d4e748fcc038d552f8e8e0932878be15360e7
SHA512

d98b59b4c4ddc25e83986cce9d6400966cf610b6f2dc21659319c585eca52073a18f0f86633a3aace10bf34834ff77deccac51b02885580ff864bcd0b4918fc3
SSDEEP

6144:a5BpXMhcbbuYwe7GnXIrBdSj6Qynv+7B43AYH5:a5BpXMh8yYwe7Gnnmnm70D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
928914f75db076f76273443271703e50_NeikiAnalytics.exe

Files

928914f75db076f76273443271703e50_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

3202b7fd303683cc2bb96866adc3a350

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
RaiseException
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
TerminateProcess
GetTimeZoneInformation
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetEnvironmentStrings
TlsSetValue
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GetFileSize
GetFileTime
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
GetFullPathNameA
GetVolumeInformationA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetThreadLocale
DuplicateHandle
SetErrorMode
GetCPInfo
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GetEnvironmentStringsW
SetHandleCount
EnterCriticalSection
GlobalDeleteAtom
WinExec
lstrcatA
DeleteFileA
GetFileAttributesA
GetLastError
CreateDirectoryA
FindNextFileA
FindClose
GetCommandLineA
GlobalAddAtomA
SetEnvironmentVariableA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
GetPrivateProfileStringA
MultiByteToWideChar
GlobalReAlloc
TlsFree
LeaveCriticalSection
GetProfileStringA
TlsAlloc
GlobalHandle
DeleteCriticalSection
SizeofResource
InitializeCriticalSection
LocalAlloc
MulDiv
GlobalFlags
lstrcpynA
SetLastError
GlobalAlloc
CloseHandle
lstrcmpA
GetCurrentThread
WideCharToMultiByte
FormatMessageA
LocalFree
InterlockedIncrement
lstrlenA
InterlockedDecrement
GetVersion
LoadLibraryA
FreeLibrary
GlobalFindAtomA
GetCurrentThreadId
lstrcmpiA
GetProcAddress
lstrcpyA
GetModuleHandleA
GlobalFree
GlobalLock
GlobalUnlock
LoadResource
LockResource
FindResourceA
LCMapStringA
GlobalGetAtomNameA
LCMapStringW
GetStdHandle
GetFileType
SetStdHandle
FindFirstFileA

user32

InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetAsyncKeyState
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
wsprintfA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
IsDialogMessageA
SetWindowTextA
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
DefWindowProcA
RegisterClassA
CreateWindowExA
DestroyWindow
WinHelpA
LoadStringA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
FindWindowA
SetForegroundWindow
PostMessageA
SendMessageA
EnableWindow
GetSysColor
MapDialogRect
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
GetTextColor
DPtoLP
LPtoDP
GetBkColor
PatBlt
GetMapMode
CreateDIBitmap
BitBlt
GetTextExtentPointA
CreateCompatibleDC
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
GetStockObject
SelectObject
SaveDC
RestoreDC
CreateBitmap
GetObjectA
DeleteDC
SetTextColor
GetClipBox
SetBkColor

comdlg32

GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CLSIDFromString
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3202b7fd303683cc2bb96866adc3a350

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 160KB - Virtual size: 156KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 29KB

.rsrc Size: 104KB - Virtual size: 104KB

.text
Size: 160KB - Virtual size: 156KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 29KB

.rsrc
Size: 104KB - Virtual size: 104KB