dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe
Size

947KB
MD5

dac24fe8adc3e42acbdf07f5351d93e0
SHA1

9dbbe638e33d1419c88f6bf49e09ae5182d911ba
SHA256

21ed4688b8cc979243160b91a9ac1a6a583b58ab22cd8019ff0c50bc7d89a299
SHA512

6da0901ea906e4675f2b8c17e087b9d98baaaf9bd6bb0c55c8f75fabedac585068708e36564a6e9926eca35bebb4abe4af6c1c666dc21e76583f16a1036e0d0c
SSDEEP

24576:UNthcGVL6hBd1HEqP8KRRgWy/Magicb80Bwu6av:sB6rzHELQRgD0agicb80Bwu6av

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe

Files

dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

743950e19d0f389c192ea37ff5cbd215

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Drydock\FingerPrint-2.2\ThirdParty\Win32\WinSparkle\Win32\Release\WinSparkle.pdb

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
FreeLibrary
LoadLibraryW
SetStdHandle
SetHandleCount
CreateFileW
FlushFileBuffers
GetVersionExW
GetEnvironmentVariableW
DebugBreak
CompareStringW
FormatMessageW
GetFileAttributesW
GetTempPathW
FindFirstFileW
FindClose
WaitForMultipleObjects
OutputDebugStringW
SetCurrentDirectoryW
FreeConsole
GetConsoleScreenBufferInfo
ReadConsoleOutputCharacterA
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleA
SetErrorMode
GetCommandLineW
MulDiv
GetLocaleInfoW
GetStdHandle
WriteFile
ExitProcess
HeapSize
GetProcAddress
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
RtlUnwind
GetCPInfo
HeapReAlloc
HeapAlloc
GetCommandLineA
CreateThread
GetCurrentThreadId
ExitThread
GetSystemTimeAsFileTime
HeapFree
DecodePointer
EncodePointer
MultiByteToWideChar
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
ReadFile
GetFullPathNameW
GetModuleHandleW
EnumResourceNamesW
ResumeThread
CloseHandle
CreateEventW
RaiseException
Sleep
SetEvent
WaitForSingleObject
DeleteCriticalSection
LockResource
GetModuleFileNameW
SizeofResource
InitializeCriticalSection
LoadResource
FindResourceA
LocalFree
OutputDebugStringA
GetLastError
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
GetDriveTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCurrentDirectoryW
SetEndOfFile
WriteConsoleW
GetProcessHeap

user32

GetMessageW
SetMenu
DrawFrameControl
DrawIconEx
DestroyCursor
GetWindowDC
BeginPaint
EndPaint
MapWindowPoints
FindWindowExW
ChangeDisplaySettingsW
EnumDisplaySettingsW
GetDlgItem
CreateDialogParamW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
GetAsyncKeyState
VkKeyScanW
GetMessageTime
EndDeferWindowPos
BeginDeferWindowPos
GetWindow
FillRect
GetUpdateRgn
GetSysColor
InflateRect
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
CallWindowProcW
DeferWindowPos
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetParent
WindowFromPoint
IsWindow
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCursorPos
SetCursor
ValidateRect
DrawFocusRect
GetCapture
ReleaseCapture
SetCapture
EnableWindow
GetFocus
SetFocus
FlashWindow
GetMenu
AdjustWindowRectEx
GetClientRect
SetWindowRgn
DrawMenuBar
EnableMenuItem
GetSystemMenu
SetWindowPos
GetDesktopWindow
SetWindowLongW
GetWindowLongW
GetWindowPlacement
IsIconic
IsZoomed
ShowWindow
BringWindowToTop
SetWindowTextW
MoveWindow
CreateDialogIndirectParamW
GetWindowRect
GetSystemMetrics
CreateIconIndirect
ReleaseDC
GetIconInfo
DestroyIcon
GetKeyState
LoadCursorW
MsgWaitForMultipleObjects
KillTimer
SetTimer
PeekMessageW
DefWindowProcW
DestroyWindow
SendMessageW
UnregisterClassW
PostThreadMessageW
MessageBoxW
CreateWindowExW
RegisterClassW
PostMessageW
SetActiveWindow
SetForegroundWindow
GetClassNameW
GetWindowTextW
GetWindowTextLengthW
DispatchMessageW
TranslateMessage
InvalidateRect
GetDoubleClickTime
SystemParametersInfoW
PtInRect
OffsetRect
DrawTextW
CopyRect
LoadIconW
GetCursorPos
LoadBitmapW
LoadImageW
GetDC

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

ole32

OleInitialize
OleUninitialize
OleLockRunning
OleSetContainedObject
OleRun
CoCreateInstance

oleaut32

SafeArrayCreate
SysAllocString
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreateVector
SysFreeString
VariantInit

comctl32

ImageList_Add
ImageList_Destroy
ImageList_Create
ord17
ImageList_Replace

gdi32

CreateBitmap
GetObjectW
RoundRect
Rectangle
Polyline
PolyPolygon
Polygon
Ellipse
MaskBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
SelectObject
BitBlt
SetPolyFillMode
SetPixel
Arc
Pie
GetPixel
ExtFloodFill
GetBkColor
SetMapMode
SelectClipRgn
ExtSelectClipRgn
GetClipBox
SetStretchBltMode
LineTo
MoveToEx
SetBkColor
SetTextColor
SetBkMode
ExtTextOutW
SetBrushOrgEx
SetROP2
GetCharABCWidthsW
GetTextExtentExPointW
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
StretchDIBits
CreateDIBSection
GetDIBits
GetDIBColorTable
CreateDIBitmap
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
SaveDC
RestoreDC
GetRegionData
CombineRgn
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
GetStockObject
CreateSolidBrush
CreatePen
GetDeviceCaps
CreateFontIndirectW
GetOutlineTextMetricsW
CreateRectRgn
ExcludeClipRect
GetTextMetricsW
GetTextExtentPoint32W
GdiFlush
OffsetRgn
DeleteObject
ExtCreateRegion

shell32

ExtractIconW
ExtractIconExW
DragFinish
DragQueryPoint
DragQueryFileW
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW

Exports

Exports

win_sparkle_check_update_with_ui
win_sparkle_cleanup
win_sparkle_get_automatic_check_for_updates
win_sparkle_get_update_check_interval
win_sparkle_init
win_sparkle_set_app_details
win_sparkle_set_appcast_url
win_sparkle_set_automatic_check_for_updates
win_sparkle_set_registry_path
win_sparkle_set_update_check_interval

Sections

.text
Size: 609KB - Virtual size: 609KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

743950e19d0f389c192ea37ff5cbd215

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

version

kernel32

user32

advapi32

ole32

oleaut32

comctl32

gdi32

shell32

Exports

Exports

Sections

.text Size: 609KB - Virtual size: 609KB

.rdata Size: 224KB - Virtual size: 223KB

.data Size: 22KB - Virtual size: 65KB

.tls Size: 512B - Virtual size: 13B

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 77KB - Virtual size: 77KB

.text
Size: 609KB - Virtual size: 609KB

.rdata
Size: 224KB - Virtual size: 223KB

.data
Size: 22KB - Virtual size: 65KB

.tls
Size: 512B - Virtual size: 13B

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 77KB - Virtual size: 77KB