400a0e49c9f0dc1e1d6cbb8dd8042990_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

400a0e49c9f0dc1e1d6cbb8dd8042990_NeikiAnalytics.exe
Size

1.1MB
MD5

400a0e49c9f0dc1e1d6cbb8dd8042990
SHA1

3789facc3b5d4fc3e4a9445a97142dcb61ddbc4b
SHA256

42abb1e28c196d5bf518702ff86882e7b2736be9633b5fabe50d5a5e4c012420
SHA512

55797a154dd88270f4b0d80db99bdffaf77ffbc8e465d776f784bbccc8ca5f1a32c6126b4d6ab15f1597bcf2cb7ed185963cd9ca81a4dfae905061f304a3471e
SSDEEP

6144:dyP6Arck/YK5QwrYsky9FJ56dONyLN7Di9GqlE:tTgYEQwMK9FJ565s0ql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400a0e49c9f0dc1e1d6cbb8dd8042990_NeikiAnalytics.exe

Files

400a0e49c9f0dc1e1d6cbb8dd8042990_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

e9c4f864fdfac66d0cdb9821ef784bab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
GetFileAttributesExW
CreateProcessW
GetModuleHandleA
LoadLibraryA
GetTickCount
DuplicateHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetFileType
LCMapStringW
GetStringTypeW
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
CreateFileW
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
GetLastError
GetCurrentProcess
OpenProcess
GetProcAddress
VirtualProtect

shell32

ShellExecuteW
SHGetFolderPathW
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
DuplicateIcon
ExtractIconExA
DragQueryFileA
DragAcceptFiles

ole32

CoCreateGuid
OleGetClipboard
ReleaseStgMedium
RevokeDragDrop

gdi32

GetPixelFormat
GetOutlineTextMetricsA
GetGlyphOutlineA
CreateEllipticRgnIndirect
CreateHatchBrush
GetGlyphOutlineW
GetGlyphIndicesW
GetPath
DeleteObject
CreatePolygonRgn
Chord
CreateDiscardableBitmap
CreatePatternBrush
AddFontResourceA
GetDIBits
GetGlyphIndicesA
CreateDIBPatternBrushPt
GetDIBColorTable
CreateCompatibleDC
CreateColorSpaceA
GetBitmapBits
GetBitmapDimensionEx
CreatePalette
CreateBitmapIndirect
GetPixel
CancelDC
GetDeviceGammaRamp
GetDeviceCaps
DeleteDC
CreateFontIndirectA
CreateDCA
AddFontResourceExW
CreateFontW
CreateColorSpaceW
GetClipBox
AnimatePalette
CreatePen
CreateDCW
GetBoundsRect
CreateBitmap
AddFontMemResourceEx
CreateFontA
AddFontResourceW

user32

GetDlgItemTextA
wsprintfA
MessageBoxA
TranslateMessage
SendDlgItemMessageA
LoadMenuA
GetFocus
MonitorFromRect
PostMessageA
GetCursor
GetWindowTextLengthA
EqualRect
EnableWindow
ShowCaret
LoadBitmapA
GetWindowPlacement
SendMessageW
LoadIconA
SetWindowPos
SendMessageA
IsWindowEnabled
DrawEdge
DrawFrameControl
ReleaseCapture
DefDlgProcA
InsertMenuItemA
GetForegroundWindow
MessageBeep
ReleaseDC
DrawTextExA
SetRect
CreatePopupMenu
ClientToScreen
DestroyWindow
SetTimer
DeferWindowPos
CreateWindowExW
IsDlgButtonChecked
PostMessageW
GetSubMenu
GetMessageW
SendDlgItemMessageW
BeginDeferWindowPos
GetWindowLongA
MoveWindow
LoadImageA
MonitorFromWindow
SetRectEmpty
GetKeyNameTextA
LoadStringA
IsWindowVisible
GetNextDlgTabItem
EnableMenuItem
GetMenuDefaultItem
SetWindowTextA
EndDialog
ReplyMessage
CharUpperA
CallWindowProcA
DrawTextA
TrackPopupMenuEx
RegisterClassExA
CharLowerA
DrawFocusRect
IsIconic
GetDlgItem
CreateDialogIndirectParamW
DispatchMessageA
SetFocus
SetClipboardData
PeekMessageA
GetSysColor
SetPropA
DrawIconEx
DialogBoxIndirectParamW
InSendMessage
GetClassInfoW
CloseWindow

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 950KB - Virtual size: 954KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c4f864fdfac66d0cdb9821ef784bab

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ole32

gdi32

user32

advapi32

Sections

.text Size: 94KB - Virtual size: 94KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 950KB - Virtual size: 954KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 94KB - Virtual size: 94KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 950KB - Virtual size: 954KB

.reloc
Size: 5KB - Virtual size: 5KB