23c33f1b63f93a27d2204034ad9fa240_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

23c33f1b63f93a27d2204034ad9fa240_NeikiAnalytics.exe
Size

316KB
MD5

23c33f1b63f93a27d2204034ad9fa240
SHA1

17e13619c691d3c864edcfad7b9c4498da98010b
SHA256

9aef87389ee36c0690d76f1e03ea70ee0f7a2e620b3ef59b0af13d97ee8ea79f
SHA512

cd8807b439c0d94bb15e27b9c5a9d94f3f044e2f22b0d46616844fc3b14ecbb00828e213cf75e02264f499728d6f4c856ec7d7c63b177152ffa2b6225b42cc3b
SSDEEP

6144:mNyjvHt9i1CDt0qhZZpvVR5IFJbZDIFaepml:mNyDiIBNZHvVR5GJbZcFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c33f1b63f93a27d2204034ad9fa240_NeikiAnalytics.exe

Files

23c33f1b63f93a27d2204034ad9fa240_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

799a7ec84fb47d6a772db4c4cebd5bf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dinput8

DirectInput8Create

kernel32

SetEvent
InitializeCriticalSection
DeleteCriticalSection
SetThreadContext
GetThreadContext
LoadLibraryA
CreateThread
lstrlenW
SetLastError
MapViewOfFile
IsDebuggerPresent
GetFileAttributesW
GetFileAttributesA
SetFilePointer
GetFullPathNameA
lstrlenA
GetLastError
SetFilePointerEx
GetFileSize
GetFileSizeEx
WaitForSingleObject
CreateEventA
ResumeThread
TerminateProcess
CreateProcessA
CreateProcessW
FindNextFileA
FindFirstFileExA
GetFileAttributesExA
GetTickCount
CopyFileA
CopyFileExA
DeleteFileA
MoveFileA
MoveFileExA
ReplaceFileA
LoadLibraryW
GetModuleHandleW
LoadLibraryExA
LoadLibraryExW
MapViewOfFileEx
FindNextFileW
FindFirstFileW
FindFirstFileExW
GetFileAttributesExW
SetFileAttributesW
CopyFileW
CopyFileExW
DeleteFileW
MoveFileW
MoveFileExW
ReplaceFileW
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
DisableThreadLibraryCalls
WaitForMultipleObjects
SetFileAttributesA
InterlockedExchange
EnterCriticalSection
TerminateThread
LeaveCriticalSection
VirtualQuery
UnmapViewOfFile
CreateFileMappingW
CreateFileMappingA
GetCurrentThread
FlushInstructionCache
ExitProcess
SetUnhandledExceptionFilter
OutputDebugStringA
FindFirstFileA
FindClose
GetSystemInfo
VirtualAlloc
VirtualProtect
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
GetModuleHandleA
GetProcAddress
GetCurrentProcess
CreateFileA
ReadFile
GetModuleFileNameA
GetCurrentDirectoryA
WriteFile
FreeLibrary
VirtualFreeEx
ReadProcessMemory
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
LocalFree
GetWindowsDirectoryA
InterlockedDecrement
GetVolumeInformationA
DeviceIoControl
HeapFree
HeapAlloc
IsBadReadPtr
CreateDirectoryA
CreateMutexA
ReleaseMutex
InterlockedIncrement
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapSize
IsBadCodePtr
GetOEMCP
SetStdHandle
FlushFileBuffers
SetEndOfFile
CloseHandle
Sleep

user32

FindWindowA
CharUpperBuffA
MessageBoxA

advapi32

RegOpenKeyExA
RegSetKeySecurity
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RevertToSelf
ImpersonateSelf
GetUserNameA
RegQueryMultipleValuesW
RegQueryMultipleValuesA
RegQueryValueExW
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyW
RegOpenKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA

shell32

ShellExecuteExW
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetFolderPathA
SHGetMalloc
ShellExecuteA
ShellExecuteW
SHGetPathFromIDListA
SHGetDesktopFolder

iphlpapi

GetAdaptersInfo

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateGuid
CoCreateInstance
CoSetProxyBlanket

oleaut32

SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocString

Exports

Exports

_InitAP2@4
_InitAP@0

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aecode
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pecode
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aphr
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

799a7ec84fb47d6a772db4c4cebd5bf7

Headers

File Characteristics

Imports

dinput8

kernel32

user32

advapi32

shell32

iphlpapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 177KB - Virtual size: 177KB

.aecode Size: 38KB - Virtual size: 38KB

.pecode Size: 21KB - Virtual size: 20KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 11KB - Virtual size: 19KB

.aphr Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 177KB - Virtual size: 177KB

.aecode
Size: 38KB - Virtual size: 38KB

.pecode
Size: 21KB - Virtual size: 20KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 11KB - Virtual size: 19KB

.aphr
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 20KB - Virtual size: 19KB