0f43bf10f899f354e43469340eba1e10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0f43bf10f899f354e43469340eba1e10_NeikiAnalytics.exe
Size

4.2MB
MD5

0f43bf10f899f354e43469340eba1e10
SHA1

62afa1870a64cebb987747cbeaefb6b3ea9fe17a
SHA256

ca0db1cd4e45cc5b608c1a97b91f74b7f153ed691ca95aceac3304d819bd27f0
SHA512

6e5e37c444204142e3c26d80f42f2f89845b78da0eca40a1ea63397e7e054f60bb5f6b9d39937de7ee92ff02e18c563c93cb0ef11194e6d3a97487ae1a051049
SSDEEP

98304:JbD5f9bUC5iidKaP7y9+7r5A2j765zaDCOh3IG2OOmoivHKnPR:B5f9blKamcr5AEIG2OOmoAHKnPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f43bf10f899f354e43469340eba1e10_NeikiAnalytics.exe

Files

0f43bf10f899f354e43469340eba1e10_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

7c60289ba53aa535b087a8e4f9b22d29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetFilePointerEx
GetConsoleMode
GetConsoleCP
RegisterWaitForSingleObject
VirtualFree
IsValidLocale
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStringTypeW
LCMapStringW
QueryPerformanceFrequency
TryEnterCriticalSection
GetExitCodeThread
OutputDebugStringW
UnregisterWait
GetThreadTimes
GetTimeZoneInformation
GetVersionExW
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
FindResourceExW
SearchPathA
GetProfileIntA
GetWindowsDirectoryA
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
VirtualProtect
FileTimeToSystemTime
GetTempFileNameA
GetTempPathA
GetACP
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetVolumeInformationA
lstrcmpiA
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
GlobalGetAtomNameA
GlobalFindAtomA
LoadLibraryA
lstrcmpW
GetSystemDirectoryW
EncodePointer
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetThreadPriority
CopyFileA
FormatMessageA
LocalFree
GlobalSize
GetCurrentProcessId
VerifyVersionInfoA
lstrcpyA
InitializeCriticalSectionAndSpinCount
VerSetConditionMask
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
SetLastError
OutputDebugStringA
CompareStringA
WideCharToMultiByte
FindResourceW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExA
GetTickCount64
ResetEvent
SetEvent
LockResource
FreeResource
SizeofResource
LoadResource
FindResourceA
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
CreateEventA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetCurrentThread
WaitForSingleObject
GetFileSize
CreateFileW
MultiByteToWideChar
CreateThread
lstrlenA
WriteFile
GetCommandLineW
SetFilePointer
CreateFileA
GetSystemTime
GetModuleFileNameA
GetCurrentThreadId
Sleep
GetCurrentProcess
GetLastError
GetProcAddress
LoadLibraryW
GetTickCount
ReadFile
CloseHandle
EnumSystemLocalesW

user32

TrackMouseEvent
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
MapVirtualKeyA
ToAsciiEx
GetKeyboardState
GetAsyncKeyState
GetKeyboardLayout
DrawIconEx
IsRectEmpty
InflateRect
DrawFocusRect
SetWindowRgn
DrawFrameControl
DrawEdge
OffsetRect
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
CharUpperA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassLongA
EqualRect
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsZoomed
IsMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
IsDialogMessageA
GetWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SetFocus
GetDlgCtrlID
SendDlgItemMessageA
CheckDlgButton
SetWindowPos
MoveWindow
ShowWindow
GetClassNameA
UpdateWindow
DrawStateA
PostThreadMessageA
MonitorFromPoint
GetWindowTextW
EnumWindows
SetWindowLongA
GetWindowLongW
SendMessageA
SetCursor
ShowOwnedPopups
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CallNextHookEx
SetCapture
UnionRect
ReleaseCapture
LoadMenuW
GetSystemMenu
MessageBeep
WindowFromPoint
IntersectRect
NotifyWinEvent
SetCursorPos
SetParent
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
UnhookWindowsHookEx
SetWindowsHookExA
SetClassLongA
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
DestroyMenu
EnableScrollBar
IsChild
MessageBoxW
LoadIconW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
UnregisterClassA
SetRect
GetDC
ReleaseDC
InvalidateRect
FillRect
GetSysColor
CopyRect
PostMessageA
PostQuitMessage
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
GetParent
DefWindowProcA
GetClassInfoA
SetLayeredWindowAttributes
MapWindowPoints
GetSysColorBrush
SetRectEmpty
LoadCursorA
LoadCursorW
SystemParametersInfoA
GetMonitorInfoA
EnumDisplayMonitors
MessageBoxA
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetFocus
GetWindowRect
GetCursorPos
PtInRect
DestroyIcon
MapDialogRect
LoadImageW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
LoadImageA
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuA
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
CharUpperBuffA
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
WaitMessage
GetWindowRgn
DestroyCursor
GetComboBoxInfo
InvertRect
HideCaret
GetNextDlgGroupItem
CreateMenu

gdi32

CreateDCA
CreateBitmap
CreateHatchBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
CopyMetaFileA
ScaleWindowExtEx
GetTextExtentPoint32A
CombineRgn
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
PatBlt
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
CreateDIBSection
SetRectRgn
DPtoLP
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceA
GetObjectA
GetTextMetricsA
GetTextCharsetInfo
EnumFontFamiliesA
CreateRectRgnIndirect
CreatePatternBrush
CreatePen
CreateFontIndirectA
CreateDIBitmap
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateSolidBrush
DeleteObject
SelectObject
GetDeviceCaps
ScaleViewportExtEx
GetStockObject
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
DragQueryFileA
DragFinish
SHBrowseForFolderA
ShellExecuteA
SHGetFileInfoA

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA

uxtheme

GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
IsAppThemed
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemePartSize
GetThemeSysColor
GetWindowTheme

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoInitializeEx
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoDisconnectObject
CoInitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CreateStreamOnHGlobal
CoCreateGuid

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
OleLoadPicture
VariantCopy
VarBstrFromDate
SysAllocString

gdiplus

GdipGetImageGraphicsContext
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c60289ba53aa535b087a8e4f9b22d29

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 363KB - Virtual size: 362KB

.data Size: 26KB - Virtual size: 51KB

.gfids Size: 107KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 138KB - Virtual size: 137KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 363KB - Virtual size: 362KB

.data
Size: 26KB - Virtual size: 51KB

.gfids
Size: 107KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 138KB - Virtual size: 137KB