0ec2a321cf81c97e3a012c82ee93fc10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0ec2a321cf81c97e3a012c82ee93fc10_NeikiAnalytics.exe
Size

708KB
MD5

0ec2a321cf81c97e3a012c82ee93fc10
SHA1

60a104c15bd5608f62928e544cf0380fd226ac80
SHA256

bf98b36d8b07844184d12fbc2e3b838800d1ecf735b2da8fa170b6db27b837f1
SHA512

ed5b595df856a3c9d5469d57869f0326b68acfdc35babdf23c618aa77a5e3021376fe096d6794a443c7732c91f5fff46270e1dbb7bc8096606cff7b1fceb4358
SSDEEP

12288:cocFNapKSLXlxVfVqpem3k1UKdcHBR9dWdk28JqhZjWfjuMMaR5H:VcFYpTJm3G/cHSoJkZgucR5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec2a321cf81c97e3a012c82ee93fc10_NeikiAnalytics.exe

Files

0ec2a321cf81c97e3a012c82ee93fc10_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

766510696abb94c935691c6c3cdb7245

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
HeapCreate
GetStringTypeA
GetStringTypeW
CreateFileA
SetStdHandle
GetACP
GetOEMCP
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetTimeZoneInformation
HeapReAlloc
HeapSize
ExitProcess
RaiseException
GetCommandLineA
RtlUnwind
GetCurrentDirectoryW
WritePrivateProfileStringW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileAttributesW
GetProcessVersion
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetTickCount
GetProfileIntW
lstrcmpW
GetCurrentThread
LocalFree
GetFullPathNameW
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynW
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
MultiByteToWideChar
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
Sleep
lstrcmpiW
FindResourceW
LoadResource
LockResource
GetCPInfo
GetVersion
GetVersionExW
GlobalSize
WriteFile
CreateFileW
GetFileSize
ReadFile
GlobalReAlloc
SetFilePointer
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
CreateDirectoryW
TerminateProcess
GetSystemTime
FindFirstFileW
FindNextFileW
FindClose
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
OpenFileMappingW
MapViewOfFile
CloseHandle
UnmapViewOfFile
DeleteFileW
CopyFileW
lstrlenW
lstrlenA

user32

IsClipboardFormatAvailable
GetDCEx
LoadStringW
WindowFromPoint
DestroyMenu
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
CharUpperW
InflateRect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
LoadIconW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
DispatchMessageW
SetFocus
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
UnregisterClassW
MessageBoxW
IsChild
GetCapture
WinHelpW
wsprintfW
RegisterClassW
GetMenu
LockWindowUpdate
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageW
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
PeekMessageW
ShowScrollBar
OpenClipboard
GetClipboardData
GetClassNameW
GetTopWindow
CloseClipboard
EnableMenuItem
IsMenu
GetFocus
ReleaseCapture
EqualRect
SetCapture
GetDoubleClickTime
SetDoubleClickTime
GetCursorPos
GetSubMenu
GrayStringW
DrawTextW
TabbedTextOutW
LoadBitmapW
SetParent
TrackPopupMenu
GetSysColorBrush
GetMenuStringW
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
AppendMenuW
GetSystemMetrics
GetDesktopWindow
DrawIconEx
FillRect
DrawEdge
GetMenuItemInfoW
ClientToScreen
CopyRect
DestroyIcon
LoadCursorW
SetCursor
ScreenToClient
DestroyCursor
LoadImageW
CheckMenuItem
KillTimer
TranslateAcceleratorW
GetMessagePos
IsRectEmpty
SetRectEmpty
InvalidateRect
SetTimer
LoadAcceleratorsW
GetParent
SystemParametersInfoW
IsWindowVisible
GetSysColor
SetWindowLongW
GetClassInfoW
GetDC
SetRect
ReleaseDC
EnableWindow
GetWindowRect
SendMessageW
GetClientRect
PtInRect
PostMessageW
GetLastActivePopup

gdi32

ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetBkMode
CreateRectRgn
SelectClipRgn
SetRectRgn
CombineRgn
CreateRectRgnIndirect
GetCharWidthW
CreateFontW
GetTextMetricsW
CopyMetaFileW
CreateBitmap
SetBkColor
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
RestoreDC
SaveDC
CreatePatternBrush
Escape
PatBlt
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
SetPixel
Ellipse
Rectangle
CreatePen
GetStockObject
StretchDIBits
GetDeviceCaps
CreateDIBSection
CreateDCW
SelectObject
DeleteDC
StretchBlt
GetObjectW
DeleteObject
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
CreateHatchBrush
BitBlt
CreateFontIndirectW
CreateSolidBrush
RoundRect

comdlg32

GetSaveFileNameW
GetFileTitleW
GetOpenFileNameW
ChooseFontW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW

comctl32

ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Draw
_TrackMouseEvent
FlatSB_EnableScrollBar
ord17
ImageList_Destroy
ImageList_Create
ImageList_GetIcon

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
ReleaseStgMedium
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
OleDuplicateData

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
OleSavePictureFile

shlwapi

PathFileExistsW
PathIsDirectoryW
PathMatchSpecW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFillRectangleI
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
GdipCreateFontFamilyFromName
GdipCreateFont
GdipCreatePath
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipMeasureString
GdipGetGenericFontFamilySansSerif
GdipCreateTexture
GdipCreateBitmapFromFile
GdipGetImageThumbnail
GdipDeleteGraphics
GdipDeleteFont
GdipDeleteStringFormat
GdipDeleteBrush
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipCreateStringFormat
GdipCreateFontFromDC
GdipCreateFontFromLogfontW
GdipDisposeImage
GdipDrawImageRectRectI
GdipGetImageWidth
GdipGetImageHeight
GdipLoadImageFromFile
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipCloneBrush
GdipCloneImage
GdipDeleteFontFamily
GdipDeletePath
GdipDeletePen
GdipFillPath
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipCreatePen1
GdipAddPathString
GdipGetFontStyle
GdipGetFontSize

rzaction

rzactiondll_DrawAction

Exports

Exports

ShowImageItemSettingDlg
ShowMenuMakerDlg
XMLDeleteMenuTitle

Sections

.text
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

766510696abb94c935691c6c3cdb7245

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

oleaut32

shlwapi

gdiplus

rzaction

Exports

Exports

Sections

.text Size: 536KB - Virtual size: 535KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 32KB - Virtual size: 44KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 48KB - Virtual size: 45KB

.text
Size: 536KB - Virtual size: 535KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 32KB - Virtual size: 44KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 48KB - Virtual size: 45KB