343e3801cb044fc45d2ec080935627b0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

343e3801cb044fc45d2ec080935627b0_NeikiAnalytics.exe
Size

152KB
MD5

343e3801cb044fc45d2ec080935627b0
SHA1

82194b77a545f97eb78e0600dd7911007e93dfe2
SHA256

a9ca7947ffd122da86538f85ac490729299258f9e1f7ee20aebb04b4bf14bacf
SHA512

d594836736d1e9cd93b295ef5c8bd7d9556ebe49dfc9bddcce99e2acd3c65a711b3bd7c5d693fc85da7c109727ef4427c1786178c0814fbcecda85586e16fdb7
SSDEEP

1536:kXbsyNsgJOFR41oAchWzDmVOpSdIf5hytGwAgnZzVn+kb7hqdA4GgoW/pMDIl6F1:kPOQchWhp+Zt7pZzZ+8yMgN4k3Fu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
343e3801cb044fc45d2ec080935627b0_NeikiAnalytics.exe

Files

343e3801cb044fc45d2ec080935627b0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

6c207ac8c2c6c3b4fbbc381fc3a4d6be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
InterlockedExchange
CompareStringA
GlobalLock
GlobalUnlock
DebugBreak
GlobalMemoryStatus
EnterCriticalSection
RaiseException
LocalAlloc
SetThreadExecutionState
FindClose
HeapDestroy
GetLastError
CloseHandle
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
SetLastError
GlobalAlloc
InterlockedIncrement
lstrcmpiA
InterlockedDecrement
LeaveCriticalSection
GlobalFree
lstrlenA
FlushInstructionCache

user32

KillTimer
ShowWindow
SetWindowPos
SetRect
GetClientRect
MoveWindow
GetSystemMetrics
RedrawWindow
SetTimer
ClipCursor
GetWindow
MapWindowPoints
GetParent
EndDialog
SetWindowRgn
ScreenToClient
PtInRect
SetWindowPlacement
GetSystemMenu
EnableMenuItem
GetWindowPlacement
MsgWaitForMultipleObjects
IsZoomed
GetWindowRect
SetCapture
GetCapture
ReleaseCapture
PostQuitMessage
IsWindowVisible
IsWindow
DestroyWindow
BringWindowToTop
IsIconic
SetForegroundWindow
SetFocus
TranslateMessage

gdi32

CombineRgn
DeleteObject
CreateRectRgn
OffsetRgn
GetRgnBox
CreateRectRgnIndirect

ole32

OleUninitialize
OleInitialize

oleaut32

SysFreeString
SysStringLen
SysAllocString

gdiplus

GdiplusShutdown
GdiplusStartup

comctl32

ord17
InitCommonControlsEx

magpltfm

magStrCopy
magHeapVmmUninit
magHeapDestroy
magHeapCreate
magHeapVmmInit

winmm

timeGetTime

shlwapi

PathRemoveBackslashW

mslurt

_onexit
_controlfp
free
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
__CxxFrameHandler
??2@YAPAXI@Z
realloc
memmove
wcslen
iswdigit
_wtoi
_wcsicmp
_purecall
wcscmp
_wsplitpath
wcscpy
wcsrchr
_wmakepath

upi6commondll

??1CAuiResource@@UAE@XZ
?InitResAUI@CAuiResource@@QAEHPBGPAUHINSTANCE__@@@Z
?GetUserINIInt@CPathEx@@SAIPBG0H@Z
?ResLoadString@CAuiResource@@QAEHIPAGH@Z
?WriteUserINIInt@CPathEx@@SAHPBG0H@Z
??0CAuiResource@@QAE@XZ
?InitIniAndSetFileName@CPathEx@@SAXPBG0@Z

Exports

Exports

DE_CreateInstance
DE_GetCatalogClassId
DE_GetCatalogDescribe
DE_GetCatalogIcon
DE_GetCatalogName
DE_GetCatalogParentId
DE_GetCatalogPriority
DE_GetCatalogSize
DE_GetClassId
DE_RegisterCommonDll

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c207ac8c2c6c3b4fbbc381fc3a4d6be

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

gdiplus

comctl32

magpltfm

winmm

shlwapi

mslurt

upi6commondll

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 86KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: 88KB - Virtual size: 86KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 40KB - Virtual size: 37KB