3366f7008735e17f40a5791c277d0860_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3366f7008735e17f40a5791c277d0860_NeikiAnalytics.exe
Size

365KB
MD5

3366f7008735e17f40a5791c277d0860
SHA1

855f5949fe74eaed5457eb0fcaed26dc461d8620
SHA256

33fc266807b9731cb605dab1623d7bd06999e3e86d2b2d710d9f15880cb47b26
SHA512

00f486a9069768eb2302b7e8a5bd09433c5a080acf88145e1c8f9b9a8c30c066d4ac345e20aab067ac7f8bde2eec454006b87eaa9293caff2c9e9feb9bb96c8f
SSDEEP

6144:/8kKIRdyvhXr+VH4WE5gx/UHRJPhFKBV+UdvrEFp7hKjJr:/PKIRdahbfs03FKBjvrEH7Ir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3366f7008735e17f40a5791c277d0860_NeikiAnalytics.exe

Files

3366f7008735e17f40a5791c277d0860_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

19b7336c545e6a65615934f89bb1161f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

memcpy
setlocale
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp
wcslen
wcscpy
wcscat
wcsncpy
memset
wcscmp
memmove
memcmp
_stricmp
strlen
strcpy
strcat
_wcsicmp
wcschr
_wcsdup
free
wcsstr
wcsncmp
floor
tolower
localtime
mktime
_wcsnicmp
_itow
gmtime
fseek
ftell
fread
fclose
pow
??3@YAXPAX@Z
_isnan
ceil
malloc
_vsnwprintf

kernel32

MulDiv
QueryDosDeviceW
GetLogicalDriveStringsW
GetDateFormatW
GetTimeFormatW
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcess
GetLastError
SetEvent
GetBinaryTypeW
VerLanguageNameW
CreateEventW
SetConsoleCtrlHandler
GenerateConsoleCtrlEvent
FreeConsole
HeapDestroy
ExitProcess
GetModuleHandleW
HeapCreate
CreateMutexW
GetStartupInfoA
GetModuleHandleA
CreateThread
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessW
PeekNamedPipe
GetExitCodeProcess
GetCommandLineW
ReadFile
CreateFileW
GetFileSize
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
WriteFile
LoadLibraryW
FreeLibrary
GetProcAddress
SetErrorMode
GetDiskFreeSpaceW
FindFirstFileW
FindNextFileW
FindClose
GetLogicalDrives
GetWindowsDirectoryW
LoadLibraryExW
WaitForMultipleObjects
ResetEvent
FindCloseChangeNotification
FindNextChangeNotification
TerminateThread
FindFirstChangeNotificationW
Sleep
GetVersionExW
SetLastError
GetDriveTypeW
GetFileAttributesW
GetTempPathW
GetLongPathNameW
GetCurrentDirectoryW
SetFileAttributesW
DeleteFileW
GetLocalTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
HeapSize
UnregisterWait
GetCurrentThread
RegisterWaitForSingleObject

user32

SendMessageW
SetWindowLongW
EnumChildWindows
EnableWindow
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetDC
ReleaseDC
DestroyIcon
LoadStringW
LoadCursorW
SetClassLongW
GetCursorPos
SetCursorPos
IsWindowEnabled
ShowScrollBar
GetDesktopWindow
GetWindowRect
RegisterWindowMessageW
ChangeWindowMessageFilter
GetWindowLongW
IsWindow
GetParent
SetPropW
DestroyWindow
CreateWindowExW
SetWindowPos
LoadIconW
GetPropW
GetCapture
ReleaseCapture
CallWindowProcW
ShowWindow
InvalidateRect
GetClientRect
IsZoomed
IsIconic
RemovePropW
FillRect
GetIconInfo
DrawStateW
MoveWindow
MessageBoxW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
GetMenuItemInfoW
SetMenu
DestroyMenu
CreatePopupMenu
AppendMenuW
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
RedrawWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
EndDialog
CreateDialogParamW
GetWindow
GetSystemMetrics
DefWindowProcW
RegisterClassExW
GetSysColor
GetSysColorBrush
GetAsyncKeyState
PostMessageW
SetRect
DrawTextW
ValidateRect
UpdateWindow
BeginPaint
EndPaint
SetCapture
ScreenToClient
SetScrollInfo
GetScrollPos
GetScrollRange
SetScrollPos
SetFocus
SystemParametersInfoW
DrawFrameControl
GetClassNameW
GetMenu
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
AdjustWindowRectEx
RegisterClassW
UnregisterClassW
CreateAcceleratorTableW
SetActiveWindow
ClientToScreen
DefFrameProcW
GetFocus
DestroyAcceleratorTable
GetKeyState
IsChild
CharUpperW
CharLowerW

gdi32

GetDeviceCaps
DeleteObject
CreateFontW
EnumFontFamiliesExW
GetObjectW
GetObjectType
IntersectClipRect
SelectObject
GetTextExtentPoint32W
SetBkColor
SetTextColor
GetStockObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateDCW
CreateCompatibleDC
DeleteDC
CreateSolidBrush
CreatePen
MoveToEx
LineTo
CreateDIBSection
SelectClipRgn
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
SetStretchBltMode
SetBrushOrgEx
StretchBlt
CreateBitmap
SetPixel
GetDIBits

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegSetValueExW
RegUnLoadKeyW
RegLoadKeyW

comctl32

ImageList_SetIconSize
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Add
CreateStatusWindowW
InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageCount
ImageList_Duplicate
ImageList_SetBkColor
ImageList_Replace
ImageList_Remove
ImageList_AddMasked
ImageList_Create

oleaut32

SysAllocString
SysFreeString

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize
CLSIDFromString
CoCreateInstance
CoTaskMemFree
CoInitialize
RevokeDragDrop

shell32

SHGetFolderLocation
SHGetPathFromIDListW
DragQueryFileW
DragFinish
ShellExecuteExW
SHGetFileInfoW
SHGetSpecialFolderLocation

winmm

timeBeginPeriod

msimg32

AlphaBlend

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

19b7336c545e6a65615934f89bb1161f

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

comctl32

oleaut32

ole32

shell32

winmm

msimg32

gdiplus

version

comdlg32

Sections

.text Size: 213KB - Virtual size: 212KB

.rdata Size: 3KB - Virtual size: 3KB

.eh_fram Size: 29KB - Virtual size: 29KB

.data Size: 24KB - Virtual size: 30KB

.rsrc Size: 17KB - Virtual size: 17KB

.text
Size: 213KB - Virtual size: 212KB

.rdata
Size: 3KB - Virtual size: 3KB

.eh_fram
Size: 29KB - Virtual size: 29KB

.data
Size: 24KB - Virtual size: 30KB

.rsrc
Size: 17KB - Virtual size: 17KB