81d50434fa8fb6e36296fbeaa7f462e0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

81d50434fa8fb6e36296fbeaa7f462e0_NeikiAnalytics.exe
Size

2.6MB
MD5

81d50434fa8fb6e36296fbeaa7f462e0
SHA1

b9e6d072fb38ce211c672d9abbeb1d90b68ac020
SHA256

d97b78e84c779cf599e67e17571efec0cc398f5363bc5d59887ef152c26b4b40
SHA512

32a4351f00f3e11d34f69ba78cb42dac45b46753ebb3747cb7cd452efc6fe669dd63d85e2b4c13d3d4f0b4195a67db91db1708d27f21e1a186591ce59f493401
SSDEEP

49152:VGTe+fTzDSKYVEbOv4fO5StAZuo1gBx1hsbZNSWJ:VGpjY6bOgfHAZt1Ka/SWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81d50434fa8fb6e36296fbeaa7f462e0_NeikiAnalytics.exe

Files

81d50434fa8fb6e36296fbeaa7f462e0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

c32672c8ca4c47ae6efb3cbcfa5cd175

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioSeek
mmioStringToFOURCCW
mmioDescend
mmioRead
mmioOpenW

comctl32

ord17

uxtheme

EnableThemeDialogTexture

dsound

ord11

kernel32

lstrlenW
LoadLibraryA
CompareStringA
GetFullPathNameW
QueryPerformanceCounter
GetFileAttributesW
CompareStringW
QueryPerformanceFrequency
WriteFile
GetCurrentProcess
GetTempPathW
OutputDebugStringA
GetVersionExA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
DeleteFileA
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
VirtualFree
VirtualAlloc
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileW
UnmapViewOfFile
FindResourceA
GetSystemInfo
IsProcessorFeaturePresent
InterlockedExchange
InterlockedCompareExchange
GetFullPathNameA
FreeResource
DeleteFileW
SetFilePointer
lstrcmpiA
MoveFileA
MoveFileW
GetTempFileNameW
IsBadWritePtr
GlobalMemoryStatus
SetEndOfFile
ExpandEnvironmentStringsA
GetEnvironmentStrings
GetLocaleInfoW
GetCurrentDirectoryA
GetModuleFileNameA
IsValidCodePage
GetOEMCP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapCreate
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
ExitProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetTimeZoneInformation
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
HeapSize
HeapReAlloc
HeapDestroy
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
GetTickCount
GetCurrentProcessId
GetUserDefaultLCID
FreeEnvironmentStringsW
EnumSystemLocalesA
IsValidLocale
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
GetLastError
LeaveCriticalSection
GetVersionExW
LoadLibraryW
GetSystemDirectoryW
InitializeCriticalSection
FreeLibrary
GetCommandLineW
MultiByteToWideChar
GetModuleFileNameW
SizeofResource
FindResourceW
Sleep
LockResource
lstrcpynW
GetModuleHandleW
LoadResource
FindResourceExW
lstrcpyW
WriteProcessMemory
CloseHandle
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
OpenProcess
CreateProcessW
GetFileAttributesA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetDriveTypeA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStringsW

user32

GetIconInfo
GetDC
ReleaseDC
SetCapture
PtInRect
OffsetRect
GetKeyboardLayout
CallWindowProcW
ReleaseCapture
UnregisterClassA
DestroyWindow
SetCursor
IsIconic
ValidateRgn
IsWindowVisible
FillRect
RegisterClassExW
UnregisterClassW
LoadCursorW
CallNextHookEx
GetClassLongW
GetMenu
GetWindowPlacement
GetAsyncKeyState
SetRect
GetWindowLongW
FindWindowW
EnumDisplayMonitors
GetWindowTextW
SystemParametersInfoW
MonitorFromWindow
SetWindowLongW
SetMenu
ClipCursor
SetWindowsHookExW
RegisterClassW
GetSystemMetrics
AdjustWindowRect
DestroyMenu
GetMonitorInfoW
EnumDisplaySettingsW
InvalidateRect
ScreenToClient
GetDlgItem
PostMessageW
TranslateMessage
PeekMessageW
CreateWindowExW
DispatchMessageW
LoadMenuIndirectW
EndDialog
SetWindowTextW
EndPaint
SetTimer
GetWindowRect
PostQuitMessage
TrackPopupMenu
GetSubMenu
GetParent
BeginPaint
LoadIconW
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
CreateDialogParamW
GetMenuItemCount
IsWindow
FindWindowExW
MessageBoxW
SendMessageW
DefWindowProcW
CheckMenuItem
GetWindowThreadProcessId
GetWindow
GetClientRect
GetKeyboardLayoutList

gdi32

DeleteObject
GetDIBits
DeleteDC
CreateSolidBrush
SelectObject
CreateDIBSection
GetObjectA
GetTextMetricsA
GetGlyphOutlineA
GetObjectW
GdiFlush
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
ExtTextOutA
MoveToEx
ExtTextOutW
GetCharacterPlacementW
CreateCompatibleDC
GetStockObject
BitBlt
GetCharacterPlacementA

advapi32

RegQueryValueExA
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyA

shell32

SHGetDesktopFolder
ExtractIconW
Shell_NotifyIconW

ole32

RegisterDragDrop
CoCreateGuid
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoInitialize
OleInitialize
RevokeDragDrop

oleaut32

SysAllocString
SysFreeString

shlwapi

PathFileExistsW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 632KB - Virtual size: 629KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c32672c8ca4c47ae6efb3cbcfa5cd175

Headers

File Characteristics

Imports

winmm

comctl32

uxtheme

dsound

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 284KB - Virtual size: 280KB

.data Size: 72KB - Virtual size: 124KB

.rsrc Size: 632KB - Virtual size: 629KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 284KB - Virtual size: 280KB

.data
Size: 72KB - Virtual size: 124KB

.rsrc
Size: 632KB - Virtual size: 629KB