240f9e6129c6e1fde4070227cf40ecb0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

240f9e6129c6e1fde4070227cf40ecb0_NeikiAnalytics.exe
Size

41KB
MD5

240f9e6129c6e1fde4070227cf40ecb0
SHA1

fc54304bb5f69d56edd602506d2272e8e86f9376
SHA256

e5af74de3847f8a6e2837000eb858fe38e93df84cc41668c9497ba50dec5e703
SHA512

15648f850e29926e7a61a80175e527b9d6782637b0a7fe478875b28ec1b3bc85e0d59f3110bf1664519b08b078fb1c8c727e86e15cc5a9db7d19e872a09541fa
SSDEEP

768:LqRECkzVbifK1TRXJ+MUhOotkmnTEDa93vyfD:IECkzVbifK9+M0O8ufD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
240f9e6129c6e1fde4070227cf40ecb0_NeikiAnalytics.exe

Files

240f9e6129c6e1fde4070227cf40ecb0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

a3141e16d0e08325858a8538270ca1e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nsw2lib

wGetTitle
wGetParent
wStrCmp
wLStrCpy
wSetFocus
wMemDispose
wMemNew
wFill
wDeRegisterDll
wRegisterDll
wMessage
wShow
wI2S
wInsert
wDeleteAll
wDismissOrCloseWindow
wProcess
wCloseWindow
wListOpenWindow
wGetMainWindow
wSetMainWindow
wAppendMenuItem
wWndSetDevice
wWndSetWindowPos
wMinimizeWindow
wSetCBack2
wCallBack
wSetUser

nsw2dstr

ord30
ord5
ord27
ord28
ord31

zakint_a

TRC_ACTION

kernel32

TlsFree
IsProcessorFeaturePresent
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetModuleFileNameW
WriteFile
LoadLibraryW
HeapReAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle

Exports

Exports

DEREGISTER_ZAKNS_A
IG_XXNS_STOP
IG_XXNW_CLOSE_ALL
IL_XXNS_TRACE_NSEG
IL_XXNW_TRACE
REGISTER_ZAKNS_A
cgXXNSMA
dXXNSMA
iFG_XXNS_FREE_NSEG_
iFG_XXNS_INIT_
iFG_XXNS_READ_GLOHSEG_
iFG_XXNS_READ_HSEG_
iFG_XXNS_SAVE_GLOHSEG_
iFG_XXNS_SAVE_HSEG_
iFG_XXNW_FREE_
iFG_XXNW_INIT_
iFG_XXNW_SAVE_
iFL_XXNS_SEARCHNSEG_
iFL_XXNW_SEARCH_
oXXNSMA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3141e16d0e08325858a8538270ca1e4

Headers

DLL Characteristics

File Characteristics

Imports

nsw2lib

nsw2dstr

zakint_a

kernel32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 2KB