2fb8db40154982f98cfa538277309550_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2fb8db40154982f98cfa538277309550_NeikiAnalytics.exe
Size

829KB
MD5

2fb8db40154982f98cfa538277309550
SHA1

03024982d6dfc357ed682abd9eae9877a657e048
SHA256

1a060d624605b7dbfb52780296f3d3757a39fa4af01950f08bf19ca31d48033c
SHA512

f122a2994a701421fa17ba7b418d8569a635a473c71078fa21da58f984c0b7c26e2fc1fa4c90e296b123e5b4053dda69683096697c98bd6f087ded23e20771ae
SSDEEP

12288:cILdZe+m3K4kBOw04uZ+EtML0n75h+hFq/aMzAb6PZxJCB3jOWfpwB4G5OaZgEIq:cILa+IyE0wB4aOaZ9aIXJ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fb8db40154982f98cfa538277309550_NeikiAnalytics.exe

Files

2fb8db40154982f98cfa538277309550_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

a57cd284d06596e80c88b5e4d1fe9973

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcessId
LCMapStringW
LCMapStringA
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
WriteFile
GetCPInfo
IsBadReadPtr
IsBadCodePtr
SetStdHandle
QueryPerformanceCounter
GetTickCount
CompareStringA
CompareStringW
SetEndOfFile
DeleteFileA
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetLastError
GetModuleHandleA
lstrlenW
MulDiv
Sleep
GetLocalTime
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
InterlockedExchange
GetTempPathA
MultiByteToWideChar
GetFullPathNameA
GetCurrentDirectoryA
GlobalFree
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
OutputDebugStringA
DebugBreak
InterlockedDecrement
lstrlenA
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetOEMCP
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
ReadFile
FormatMessageA
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileA
WaitForSingleObject
CreateThread
TerminateThread
RtlUnwind
HeapSize
ExitProcess
TerminateProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetDriveTypeA
GetSystemTimeAsFileTime
TlsAlloc

user32

LoadStringA
wvsprintfA
CallWindowProcA
BringWindowToTop
ShowWindow
GetWindowTextLengthA
IsWindow
DestroyWindow
SetFocus
PostMessageA
GetDlgItem
SendDlgItemMessageA
GetDlgItemTextA
EnableWindow
SendMessageA
GetActiveWindow
GetWindowLongA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
MessageBoxA
SetDlgItemTextA
SetWindowTextA
EndDialog
IsDlgButtonChecked
CheckDlgButton
DialogBoxParamA
SetWindowLongA
GetDesktopWindow
ReleaseDC
GetDC
UnregisterClassA
CharNextA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetTimer
KillTimer
LoadBitmapA
DefWindowProcA
LoadImageA
GetSystemMetrics

gdi32

EnumFontFamiliesExA
CreateRectRgn
GetTextExtentPoint32A
GetRegionData
StretchDIBits
GetStockObject
TextOutW
ExtCreatePen
SelectClipRgn
CreateHatchBrush
CreateSolidBrush
CreatePen
CreatePolygonRgn
CreateBitmap
CreateFontIndirectA
ExtTextOutA
StrokeAndFillPath
EndPath
BeginPath
SetTextAlign
StretchBlt
LineTo
MoveToEx
RectVisible
FillRgn
SetMapMode
SetTextColor
SetStretchBltMode
SetBkMode
SetBkColor
GetDeviceCaps
GetDIBits
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
CombineRgn
DeleteObject

advapi32

RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

VarUI4FromStr

comctl32

DestroyPropertySheetPage
InitCommonControlsEx
PropertySheetA
CreatePropertySheetPageA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

Sections

.text
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

V
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a57cd284d06596e80c88b5e4d1fe9973

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: 700KB - Virtual size: 700KB

.rsrc Size: 75KB - Virtual size: 74KB

V Size: 50KB - Virtual size: 52KB

.text
Size: 700KB - Virtual size: 700KB

.rsrc
Size: 75KB - Virtual size: 74KB

V
Size: 50KB - Virtual size: 52KB