1be09e17361df3b2f5b8329a3621b7a0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1be09e17361df3b2f5b8329a3621b7a0_NeikiAnalytics.exe
Size

156KB
MD5

1be09e17361df3b2f5b8329a3621b7a0
SHA1

4e20d2e17f5c3bdf545af82a9b5c9e8bb92d2f17
SHA256

47258a003ad502fe830644a1ac7a9903b0ad9f1c86a892edeeaf4183f2a856dd
SHA512

bcc5e6c7b16df48e7485348414fce1f2542c962a737956be23e9562eefce0310a5bfcd70b231825890467b5a078faa2ae3ab70903c3e91d970d4d2664460c192
SSDEEP

3072:awOJy1y4ULGHz9+SuwH968hwW7UoogCNIDg5YrcM6xf+GhcEAM:oFPLGBR968hwW7UooItcMGfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1be09e17361df3b2f5b8329a3621b7a0_NeikiAnalytics.exe

Files

1be09e17361df3b2f5b8329a3621b7a0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

48651f87ce0072b1c3de7cb1ebca6f77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

evtrig.pdb

Imports

user32

wsprintfW
LoadStringW
CharUpperW

mpr

WNetAddConnection2W
WNetGetLastErrorW
WNetCancelConnection2W

ole32

CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VariantClear
SysAllocStringByteLen
SysStringLen
VariantChangeType
VariantCopy
SysFreeString
SysAllocString
VariantInit

framedyn

?Find@CHString@@QBEHPBG@Z
??4CHString@@QAEABV0@PBG@Z
?Mid@CHString@@QBE?AV1@H@Z
?ReleaseBuffer@CHString@@QAEXH@Z
?Format@CHString@@QAAXPBGZZ
?Find@CHString@@QBEHG@Z
?Compare@CHString@@QBEHPBG@Z
?Empty@CHString@@QAEXXZ
?Mid@CHString@@QBE?AV1@HH@Z
?Left@CHString@@QBE?AV1@H@Z
??4CHString@@QAEABV0@ABV0@@Z
?TrimLeft@CHString@@QAEXXZ
?TrimRight@CHString@@QAEXXZ
??0CHString@@QAE@XZ
?Right@CHString@@QBE?AV1@H@Z
??0CHString@@QAE@PBG@Z
?FindOneOf@CHString@@QBEHPBG@Z
?GetBufferSetLength@CHString@@QAEPAGH@Z
?GetData@CHString@@IBEPAUCHStringData@@XZ
??1CHString@@QAE@XZ

secur32

GetUserNameExW

ws2_32

WSAGetLastError
inet_addr
gethostbyaddr
WSACleanup
WSAStartup

netapi32

NetApiBufferFree
NetServerGetInfo

shlwapi

StrChrW
StrStrIW
StrStrW
StrChrIW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msvcrt

_msize
memmove
_itow
??2@YAPAXI@Z
wcstol
_iob
??3@YAXPAX@Z
_CxxThrowException
_vsnwprintf
_wcsicmp
_errno
_get_osfhandle
_fileno
_except_handler3
wcstoul
fflush
?terminate@@YAXXZ
_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
strtok
wcstok
__CxxFrameHandler
fprintf
wcstod

advapi32

GetUserNameW

kernel32

SetLastError
LocalFree
CompareStringW
InterlockedDecrement
InterlockedIncrement
GetTimeFormatW
GetComputerNameExW
GetModuleFileNameW
GetConsoleOutputCP
LocalAlloc
lstrlenW
FormatMessageW
WriteConsoleW
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
HeapReAlloc
HeapFree
SetConsoleMode
ReadFile
ReadConsoleW
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
GetThreadLocale
lstrlenA
GetFileType
GetConsoleMode
TerminateProcess
GetCurrentProcess
VerSetConditionMask
VerifyVersionInfoW
GetLastError
FileTimeToSystemTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

48651f87ce0072b1c3de7cb1ebca6f77

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

mpr

ole32

oleaut32

framedyn

secur32

ws2_32

netapi32

shlwapi

version

msvcrt

advapi32

kernel32

Sections

.text Size: 91KB - Virtual size: 91KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 63KB - Virtual size: 64KB

.text
Size: 91KB - Virtual size: 91KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 63KB - Virtual size: 64KB