983f73a347eb5467f96efd963290fd80_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

983f73a347eb5467f96efd963290fd80_NeikiAnalytics.exe
Size

703KB
MD5

983f73a347eb5467f96efd963290fd80
SHA1

b543dd853df05dcdbf30b4449d6f7d27600c59bd
SHA256

f2d017f0189f8fd06c7f71d3844b0f5b0b7e52cd706618047aa9ce4cb8328518
SHA512

3de2e17aa0a21034dbe160228bb5777db47d78e1c14b45ca2d13a986191dd5d05fca98bb4636c928f45887a3dbb68265e01330e3c1972de09baab64a7ef3cb59
SSDEEP

12288:JOJSdZQFfmqmFrfBCgiw4bivhqGoj85sVPL5qw+Dlx:JOJSdyEqMrfUgYbkhqfj8uqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
983f73a347eb5467f96efd963290fd80_NeikiAnalytics.exe

Files

983f73a347eb5467f96efd963290fd80_NeikiAnalytics.exe
.exe windows:10 windows x86 arch:x86

2df29d0736b8a2a1fcce9f4f1b61f32a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msidb.pdb

Imports

kernel32

WriteFile
FindNextFileA
FindResourceA
lstrlenA
FindClose
GetCurrentDirectoryA
MultiByteToWideChar
GetLastError
GetFileAttributesA
CreateFileA
LockResource
CloseHandle
LoadResource
GetProcAddress
GetModuleHandleW
GetFileType
FlushFileBuffers
GetStdHandle
VirtualQuery
GetSystemInfo
WriteConsoleW
SetStdHandle
LCMapStringW
GetStringTypeW
SetFilePointer
GetConsoleMode
GetConsoleCP
RaiseException
FindFirstFileA
CreateFileW
SizeofResource
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
Sleep
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
HeapAlloc
VirtualProtect
EncodePointer
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineA
GetStartupInfoW
GetVersionExW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetLastError
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
LoadLibraryExW
GetModuleFileNameA
HeapCreate
HeapFree
VirtualFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter

user32

SendDlgItemMessageA
MessageBoxA
IsDialogMessageA
ShowWindow
DialogBoxParamA
EndDialog
SetDlgItemTextA
LoadStringA
DestroyWindow
GetMessageA
GetDlgItem
PeekMessageA
EnableWindow
PostMessageA
CreateDialogParamA

ole32

CoUninitialize
StgOpenStorage
StgCreateDocfile
CoInitialize

comdlg32

GetOpenFileNameA
GetSaveFileNameA

msi

ord48
ord8
ord160
ord158
ord20
ord21
ord29
ord164
ord77
ord170
ord91
ord31
ord124
ord18
ord117
ord163
ord27
ord120
ord119
ord122
ord159
ord17

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2df29d0736b8a2a1fcce9f4f1b61f32a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

comdlg32

msi

Sections

.text Size: 59KB - Virtual size: 59KB

.data Size: 3KB - Virtual size: 9KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 59KB - Virtual size: 59KB

.data
Size: 3KB - Virtual size: 9KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 568KB - Virtual size: 572KB