92e9055623b1d4af69f4086f3d2964b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

92e9055623b1d4af69f4086f3d2964b0_NeikiAnalytics.exe
Size

316KB
MD5

92e9055623b1d4af69f4086f3d2964b0
SHA1

27858dbfbf5ecae28095a60bfdd6a519a12faba8
SHA256

1f6cc6dee31f7e068905de65ae7960e8dd47852d23a33d3007ebc6c7a793847d
SHA512

a4c8e550f61afc2a9a89235a128d3f688a5b2c06668ec1590224f160844bb6664e1e2321ce4a432359e94514050f4a32008c40e7c1e6d89bfa3d715d2ba29527
SSDEEP

6144:mNyjvHt9i1CDt0qhZZpvVRYD/haJbZDIFaepmkE:mNyDiIBNZHvVRUhaJbZcFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92e9055623b1d4af69f4086f3d2964b0_NeikiAnalytics.exe

Files

92e9055623b1d4af69f4086f3d2964b0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

799a7ec84fb47d6a772db4c4cebd5bf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dinput8

DirectInput8Create

kernel32

SetEvent
InitializeCriticalSection
DeleteCriticalSection
SetThreadContext
GetThreadContext
LoadLibraryA
CreateThread
lstrlenW
SetLastError
MapViewOfFile
IsDebuggerPresent
GetFileAttributesW
GetFileAttributesA
SetFilePointer
GetFullPathNameA
lstrlenA
GetLastError
SetFilePointerEx
GetFileSize
GetFileSizeEx
WaitForSingleObject
CreateEventA
ResumeThread
TerminateProcess
CreateProcessA
CreateProcessW
FindNextFileA
FindFirstFileExA
GetFileAttributesExA
GetTickCount
CopyFileA
CopyFileExA
DeleteFileA
MoveFileA
MoveFileExA
ReplaceFileA
LoadLibraryW
GetModuleHandleW
LoadLibraryExA
LoadLibraryExW
MapViewOfFileEx
FindNextFileW
FindFirstFileW
FindFirstFileExW
GetFileAttributesExW
SetFileAttributesW
CopyFileW
CopyFileExW
DeleteFileW
MoveFileW
MoveFileExW
ReplaceFileW
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
DisableThreadLibraryCalls
WaitForMultipleObjects
SetFileAttributesA
InterlockedExchange
EnterCriticalSection
TerminateThread
LeaveCriticalSection
VirtualQuery
UnmapViewOfFile
CreateFileMappingW
CreateFileMappingA
GetCurrentThread
FlushInstructionCache
ExitProcess
SetUnhandledExceptionFilter
OutputDebugStringA
FindFirstFileA
FindClose
GetSystemInfo
VirtualAlloc
VirtualProtect
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
GetModuleHandleA
GetProcAddress
GetCurrentProcess
CreateFileA
ReadFile
GetModuleFileNameA
GetCurrentDirectoryA
WriteFile
FreeLibrary
VirtualFreeEx
ReadProcessMemory
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
LocalFree
GetWindowsDirectoryA
InterlockedDecrement
GetVolumeInformationA
DeviceIoControl
HeapFree
HeapAlloc
IsBadReadPtr
CreateDirectoryA
CreateMutexA
ReleaseMutex
InterlockedIncrement
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapSize
IsBadCodePtr
GetOEMCP
SetStdHandle
FlushFileBuffers
SetEndOfFile
CloseHandle
Sleep

user32

FindWindowA
CharUpperBuffA
MessageBoxA

advapi32

RegOpenKeyExA
RegSetKeySecurity
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RevertToSelf
ImpersonateSelf
GetUserNameA
RegQueryMultipleValuesW
RegQueryMultipleValuesA
RegQueryValueExW
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyW
RegOpenKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA

shell32

ShellExecuteExW
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetFolderPathA
SHGetMalloc
ShellExecuteA
ShellExecuteW
SHGetPathFromIDListA
SHGetDesktopFolder

iphlpapi

GetAdaptersInfo

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateGuid
CoCreateInstance
CoSetProxyBlanket

oleaut32

SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocString

Exports

Exports

_InitAP2@4
_InitAP@0

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aecode
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pecode
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aphr
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

799a7ec84fb47d6a772db4c4cebd5bf7

Headers

File Characteristics

Imports

dinput8

kernel32

user32

advapi32

shell32

iphlpapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 177KB - Virtual size: 177KB

.aecode Size: 38KB - Virtual size: 38KB

.pecode Size: 21KB - Virtual size: 20KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 11KB - Virtual size: 19KB

.aphr Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 177KB - Virtual size: 177KB

.aecode
Size: 38KB - Virtual size: 38KB

.pecode
Size: 21KB - Virtual size: 20KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 11KB - Virtual size: 19KB

.aphr
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 20KB - Virtual size: 19KB