88fa85dade38b20929f7da2466d03fe0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

88fa85dade38b20929f7da2466d03fe0_NeikiAnalytics.exe
Size

124KB
MD5

88fa85dade38b20929f7da2466d03fe0
SHA1

bc8dcf170eb0e8fa79b25959827df993e787de22
SHA256

24194e996f55805e2bacd294cc71d2e79a34a740f0892b3ca5cda0fc6419433e
SHA512

fa3525ded36526f6fee9fe6287802e84fba674efa1141bcc1048c8dfe38dcea8e77e018adefe91b7925fef7a52b401e3b87141676b5459ce9b75eaf7ccc4dca6
SSDEEP

3072:zYUa864TBN0G72PdSW05BDIsFS+XG7Kkc:IQTLpIpYDIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88fa85dade38b20929f7da2466d03fe0_NeikiAnalytics.exe

Files

88fa85dade38b20929f7da2466d03fe0_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x86 arch:x86

bc1d2fe28cbf06e3f3f54c4fa692d8a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\build\checkout\projects\Cpp\Smilebox\release\MP3Encoder.pdb

Imports

msacm32

acmMetrics
acmDriverRemove
acmDriverDetailsW
acmDriverEnum
acmStreamConvert
acmDriverClose
acmDriverOpen
acmStreamClose
acmStreamPrepareHeader
acmStreamOpen
acmStreamUnprepareHeader
acmFormatSuggest
acmDriverAddW

shlwapi

PathFileExistsW

kernel32

CloseHandle
LoadLibraryW
FreeLibrary
GetProcAddress
GetVersionExW
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
SetFilePointer
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FreeEnvironmentStringsA
IsValidCodePage
FlushFileBuffers
CreateFileA
lstrlenA
lstrlenW
lstrcmpW
DisableThreadLibraryCalls
WriteConsoleW

advapi32

RegCreateKeyW
RegSetValueW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW

ole32

CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc1d2fe28cbf06e3f3f54c4fa692d8a0

Headers

File Characteristics

PDB Paths

Imports

msacm32

shlwapi

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 12KB - Virtual size: 8KB