037a0a6a23d26be704096eb2c6d03bc0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

037a0a6a23d26be704096eb2c6d03bc0_NeikiAnalytics.exe
Size

3.2MB
MD5

037a0a6a23d26be704096eb2c6d03bc0
SHA1

69ec0eaa78c44fc685a69fdce005b4a8c55493ce
SHA256

24b9a45103174b7156e60b9fc401fc7dc62de0f80e60e609dd8aa45988eb76b5
SHA512

063e06c4dd8f527c44628984f2487f7d643633529dafbfec2752e941fc198b73cf334c01cb1375c073ed50af8ff256411156060bd9e435ced41b0a7e353d38c3
SSDEEP

98304:Q68cjHP/ZwhSyhWE5ovX3dTZYckUvV6yIaHhBR4:Q68kPBwhbhWE5M3dOcDNV/B7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
037a0a6a23d26be704096eb2c6d03bc0_NeikiAnalytics.exe

Files

037a0a6a23d26be704096eb2c6d03bc0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

13380b6fcda5053e4a8110ce6341a74f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

UnlockUrlCacheEntryFile

oleaut32

SafeArrayCreate

gdi32

Chord
CreateCompatibleDC
LineTo
UpdateColors
SetTextColor
GdiFlush
PathToRegion

ole32

CoTaskMemAlloc

user32

CreateWindowExA
SetFocus
GetScrollBarInfo
ReleaseDC

kernel32

SetEvent
CreateDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetVersionExA
GetModuleFileNameW
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
GetLastError
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
HeapFree
Sleep
ExitProcess
GetLocaleInfoA
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapAlloc
VirtualFree
VirtualAlloc
HeapReAlloc
LoadLibraryA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA

Exports

Exports

SdekbleRstnees

Sections

r_ZdK
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

HE8wLE62
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13380b6fcda5053e4a8110ce6341a74f

Headers

DLL Characteristics

File Characteristics

Imports

wininet

oleaut32

gdi32

ole32

user32

kernel32

Exports

Exports

Sections

r_ZdK Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 32KB - Virtual size: 38KB

.crt Size: 520KB - Virtual size: 519KB

.rsrc Size: 4KB - Virtual size: 936B

HE8wLE62 Size: 24KB - Virtual size: 21KB

r_ZdK
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 32KB - Virtual size: 38KB

.crt
Size: 520KB - Virtual size: 519KB

.rsrc
Size: 4KB - Virtual size: 936B

HE8wLE62
Size: 24KB - Virtual size: 21KB