0bc05dfb7a6e36d7cd090df2b90ee6a0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0bc05dfb7a6e36d7cd090df2b90ee6a0_NeikiAnalytics.exe
Size

469KB
MD5

0bc05dfb7a6e36d7cd090df2b90ee6a0
SHA1

3d4cea527b5536b912817e63977e0a3bad98e0f8
SHA256

bb5dad8904624bb49066087c36b9c568aebdb5fa5212b140332b5a2be9882ebc
SHA512

ae929723db267cd1ac45bb6358589e0f8a89eef781571d83c566743b4c7e40af6e4ca7fa7bc775fa342b787442c016065f3cbffe5b47fe33121ca25c5f232128
SSDEEP

12288:YjNzPQoOhR1yllAeTYqEMiYvE2uInX6pBZ:YjNzP/+ElLcXYjXc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc05dfb7a6e36d7cd090df2b90ee6a0_NeikiAnalytics.exe

Files

0bc05dfb7a6e36d7cd090df2b90ee6a0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

53ab94d3d77f83d41a1e789e8aac90cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord17

kernel32

TlsSetValue
TlsGetValue
GetTickCount
GetWindowsDirectoryA
GetModuleFileNameA
FreeLibrary
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetSystemDirectoryA
LoadLibraryA
GetEnvironmentVariableA
GlobalLock
GlobalAlloc
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
lstrcpyA
MulDiv
CloseHandle
Sleep
InitializeCriticalSection
TlsAlloc
TlsFree
DeleteCriticalSection
HeapAlloc
HeapFree
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GetProcessHeap
CreateFileA
WriteFile
ReadFile
lstrlenA
GetLastError
LocalFree
InterlockedDecrement
SetFilePointer
DeleteFileA

user32

MessageBoxA
SetWindowPos
GetDesktopWindow
wvsprintfA
wsprintfA
GetWindowLongA
SetWindowLongA
CheckDlgButton
SetDlgItemInt
EnableWindow
SendMessageA
IsDlgButtonChecked
GetDlgItemInt
GetDlgItem
SetFocus
SendDlgItemMessageA
LoadStringA
DialogBoxParamA
EndDialog
SetDlgItemTextA
GetDlgItemTextA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

VariantClear
SysFreeString
SysStringByteLen
SysAllocStringByteLen

msvcr71

wcslen
_snprintf
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
?terminate@@YAXXZ
_purecall
_CxxThrowException
??1type_info@@UAE@XZ

Exports

Exports

IDP_CloseImage
IDP_FreeMetadata
IDP_GetAudio
IDP_GetImageInfo
IDP_GetMetadata
IDP_GetPageInfo
IDP_GetPlugInInfo
IDP_Help
IDP_Init
IDP_OpenImage
IDP_PageDecode
IDP_PageDecodeStart
IDP_PageDecodeStep
IDP_PageDecodeStop
IDP_ShowPlugInDialog
IEP_GetDefaultEncodeParams
IEP_GetPlugInInfo
IEP_GetValidPixelFormats
IEP_Help
IEP_ImageEncode
IEP_Init
IEP_SetAudio
IEP_SetMetadata
IEP_ShowEncodeParamsDialog
IEP_ShowPlugInDialog

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53ab94d3d77f83d41a1e789e8aac90cb

Headers

File Characteristics

Imports

comctl32

kernel32

user32

version

advapi32

oleaut32

msvcr71

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 392KB - Virtual size: 390KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 392KB - Virtual size: 390KB

.reloc
Size: 8KB - Virtual size: 5KB