9616bf9a464a3204272cb703c4417c10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
9616bf9a464a3204272cb703c4417c10_NeikiAnalytics.exe
Size 586KB
Sample240603-btpdzsff44
SHA256 31361137a5ff9f03f34b5d6642706a1cfe7b6bfa9c33aadf923a3d32647ea7cb
MD5 9616bf9a464a3204272cb703c4417c10
SHA1 04ed77ba6b9c4634754fd8de9c367b6b4054d1b1
SHA512 b25547fc11a8976e7efa199b93e2f00468d16255b7c6fecebac9c01acf5aaa2bd78ca5cf7e4d43e36979d0bff8c7b2f02a5ea8513ba9b84480f1fcd6fc27c88e
SSDEEP 12288:2plrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:SxR1+FCcuvm0as
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9616bf9a464a3204272cb703c4417c10_NeikiAnalytics.exe

File Explorer

9616bf9a464a3204272cb703c4417c10_NeikiAnalytics.exe

.exe 586KB

9616bf9a464a3204272cb703c4417c10_NeikiAnalytics.exe

IMPHASH 4348535f9074b4376c05f82a699ec652
SHA256 31361137a5ff9f03f34b5d6642706a1cfe7b6bfa9c33aadf923a3d32647ea7cb
MD5 9616bf9a464a3204272cb703c4417c10
SHA1 04ed77ba6b9c4634754fd8de9c367b6b4054d1b1
SHA512 b25547fc11a8976e7efa199b93e2f00468d16255b7c6fecebac9c01acf5aaa2bd78ca5cf7e4d43e36979d0bff8c7b2f02a5ea8513ba9b84480f1fcd6fc27c88e
SSDEEP 12288:2plrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:SxR1+FCcuvm0as
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

153034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\JinZQ\Hook开机启动\CallWebDllLib\Release\CallDll.pdb

kernel32

FileTimeToSystemTime SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GetFileTime RtlUnwind ExitProcess GetSystemTimeAsFileTime VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStartupInfoA GetCommandLineA HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentProcessId HeapDestroy GetOEMCP VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetTimeZoneInformation SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue GlobalHandle GlobalReAlloc LocalAlloc GlobalFlags SetLastError FormatMessageA GlobalFree FreeResource GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW GlobalAddAtomA GetCurrentThread GlobalDeleteAtom GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LocalFree OutputDebugStringW TerminateProcess FindResourceExA LoadLibraryA MoveFileExA WritePrivateProfileStringA GetCurrentThreadId IsDBCSLeadByte lstrcpynA LoadLibraryExA FreeLibrary GetModuleHandleA lstrcmpA GlobalAlloc GlobalLock GlobalUnlock HeapAlloc GetCurrentProcess FlushInstructionCache MulDiv InterlockedDecrement InterlockedIncrement GetTickCount GetWindowsDirectoryA GetProcessId Thread32First Thread32Next CreateToolhelp32Snapshot Process32First OpenProcess GetPriorityClass Process32Next DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException GetProcessHeap HeapFree CompareStringW CompareStringA lstrlenA lstrlenW lstrcmpiA GetVersion GetLastError MultiByteToWideChar CreateThread CloseHandle GetPrivateProfileStringA CreateDirectoryA GetModuleFileNameA CreateProcessA CopyFileA DeleteFileA MoveFileA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource Sleep GetVersionExA GetThreadLocale GetLocaleInfoA GetACP HeapCreate InterlockedExchange

user32

MessageBeep GetNextDlgGroupItem CopyAcceleratorTableA SetRect IsRectEmpty GetSysColorBrush GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu MoveWindow IsDialogMessageA SetWindowContextHelpId MapDialogRect CreateDialogIndirectParamA GetNextDlgTabItem EndDialog WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetForegroundWindow SetActiveWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount AdjustWindowRectEx EqualRect GetClassInfoA SetWindowPlacement GetDlgCtrlID OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect GetLastActivePopup IsWindowEnabled SetCursor PostMessageA SetTimer PeekMessageA GetWindowThreadProcessId MessageBoxA RegisterClassA ShowWindow UpdateWindow GetMessageA TranslateMessage DispatchMessageA PostQuitMessage RegisterWindowMessageA GetWindowTextLengthA GetWindowTextA SetWindowTextA GetClassInfoExA LoadCursorA wsprintfA RegisterClassExA CreateAcceleratorTableA CharNextA PostThreadMessageA RegisterClipboardFormatA GetParent GetClassNameA SetWindowPos DestroyWindow RedrawWindow GetDlgItem SetFocus GetFocus IsChild GetWindow DestroyAcceleratorTable BeginPaint EndPaint CallWindowProcA GetDesktopWindow InvalidateRgn InvalidateRect ReleaseDC GetDC FillRect SetCapture ReleaseCapture GetSysColor DefWindowProcA UnregisterClassA CreateWindowExA SetWindowLongA UnhookWindowsHookEx SetWindowsHookExA CallNextHookEx IsWindow GetWindowLongA CharUpperA GetSystemMetrics LoadIconA EnableWindow GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon

gdi32

CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetTextColor GetBkColor SetBkColor SetTextColor GetClipBox CreateBitmap CreateSolidBrush GetStockObject GetObjectA GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap DeleteDC SelectObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegCreateKeyExA RegDeleteValueA RegOpenKeyExA RegCloseKey RegQueryInfoKeyA RegEnumKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA RegDeleteKeyA RegQueryValueA RegOpenKeyA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathFileExistsA PathIsUNCA

oledlg

ord8

ole32

CoInitialize OleUninitialize OleInitialize CoTaskMemRealloc StgOpenStorageOnILockBytes CLSIDFromString CLSIDFromProgID CreateStreamOnHGlobal OleLockRunning CoTaskMemAlloc StringFromGUID2 CoCreateInstance StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoFreeUnusedLibraries CoRegisterMessageFilter CoGetClassObject OleFlushClipboard OleIsCurrentClipboard CoTaskMemFree CoRevokeClassObject

oleaut32

SafeArrayDestroy SystemTimeToVariantTime SysAllocStringByteLen VariantChangeType VariantCopy VarUI4FromStr LoadTypeLi LoadRegTypeLi VariantInit OleCreateFontIndirect SysStringByteLen VariantClear SysStringLen SysFreeString SysAllocString SysAllocStringLen

psapi

GetModuleFileNameExA

ws2_32

bind socket closesocket htons WSAStartup htonl