7e891a4b465904a52b1781d40619a460_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

7e891a4b465904a52b1781d40619a460_NeikiAnalytics.exe
Size

2.2MB
MD5

7e891a4b465904a52b1781d40619a460
SHA1

59c9690fb50e2163fd7f9a19dd1f3c2400173ee6
SHA256

d763da4a870affa714a5d0899d8560a81a6a3d2d7db07a8f70a1f26301bb374e
SHA512

482a408868fc356afe1f189e9a9fd09a4d545dad47d7e8fd0f205cd31160f8e57749177aa767abbd82d9635bc215473bf5e6cdcbe177406897e22b30bd0367f6
SSDEEP

24576:lhhjI97f4FoF130ksFw4bJnf6GI0W0E1o22q1Y4cshD9TkTLM12d01LHh:lvoQqDsFVfC0W0EG2915bWTLMK01LHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e891a4b465904a52b1781d40619a460_NeikiAnalytics.exe

Files

7e891a4b465904a52b1781d40619a460_NeikiAnalytics.exe
.exe windows:4 windows x64 arch:x64

bc2c2ef39d2308c4750b8acd3058cb7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA

gdi32

ChoosePixelFormat
CreateDCA
CreatePalette
DeleteDC
DescribePixelFormat
GetDeviceCaps
GetPaletteEntries
GetPixelFormat
GetSystemPaletteEntries
RealizePalette
SelectPalette
SetPaletteEntries
SetPixelFormat
SwapBuffers
UnrealizeObject

glu32

gluOrtho2D

kernel32

AllocConsole
AttachConsole
BuildCommDCBA
CloseHandle
CreateConsoleScreenBuffer
CreateFileA
DeleteCriticalSection
EnterCriticalSection
FlushConsoleInputBuffer
FlushFileBuffers
FreeConsole
GetCommState
GetCommTimeouts
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetFileAttributesA
GetLastError
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
InitializeCriticalSection
LeaveCriticalSection
PeekConsoleInputA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadConsoleOutputA
ReadFile
SetCommState
SetCommTimeouts
SetConsoleActiveScreenBuffer
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteConsoleA
WriteConsoleOutputA
WriteConsoleOutputW
WriteFile

api-ms-win-crt-convert-l1-1-0

mbrtowc
strtol
strtoul
wcrtomb
wcstombs

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv
_putenv

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_stat64
_unlock_file

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc
realloc

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

__C_specific_handler
memchr
memcmp
memcpy
memmove
strchr
strrchr
strstr

api-ms-win-crt-runtime-l1-1-0

_set_app_type
__p___argc
__p___argv
__p___wargv
__p__acmdln
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_exit
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_invalid_parameter_handler
abort
exit
signal
strerror
_getpid

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_get_osfhandle
_lseeki64
_wopen
fclose
fflush
fopen
fputc
fread
fwrite
getc
putchar
puts
ungetc
_write
_read
_open
_isatty
_fileno
_close

api-ms-win-crt-string-l1-1-0

iscntrl
islower
isprint
isspace
isupper
isxdigit
mbrlen
memset
strcmp
strcpy
strcspn
strlen
strncat
strncmp
strncpy
strtok
tolower
wcslen
_stricmp
_stricmp
_strdup

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_time64
_tzset

api-ms-win-crt-utility-l1-1-0

bsearch
qsort
rand
srand

opengl32

glBegin
glBindTexture
glBitmap
glBlendFunc
glClear
glColor3b
glColor4b
glColor4f
glColor4fv
glDisable
glDisableClientState
glDrawArrays
glDrawBuffer
glDrawElements
glEnable
glEnableClientState
glEnd
glFlush
glGenTextures
glGetBooleanv
glGetError
glGetFloatv
glGetIntegerv
glGetString
glLoadIdentity
glMatrixMode
glNormalPointer
glOrtho
glPixelStorei
glPopAttrib
glPopClientAttrib
glPopMatrix
glPushAttrib
glPushClientAttrib
glPushMatrix
glRasterPos2i
glReadBuffer
glTexCoord2f
glTexCoordPointer
glTexImage2D
glTexParameteri
glTranslatef
glVertex2f
glVertex2i
glVertexPointer
glViewport
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglMakeCurrent

user32

AdjustWindowRectEx
BeginPaint
ChangeDisplaySettingsExA
ChildWindowFromPoint
ClientToScreen
CopyRect
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplayMonitors
EnumDisplaySettingsA
GetClassInfoA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetKeyState
GetKeyboardState
GetMessageA
GetMessagePos
GetMonitorInfoA
GetRawInputData
GetRawInputDeviceInfoA
GetSystemMetrics
GetUpdateRect
GetWindowLongA
GetWindowRect
InvalidateRect
IsIconic
IsZoomed
LoadCursorA
LoadIconA
MessageBeep
MonitorFromWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageA
PostQuitMessage
RegisterClassA
RegisterRawInputDevices
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetActiveWindow
SetCapture
SetClassLongPtrA
SetCursor
SetCursorPos
SetRect
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowCursor
ShowWindow
ToAscii
TrackMouseEvent
TranslateMessage
UnregisterClassA
UpdateWindow

winmm

joyGetDevCapsA
joyGetPosEx
timeBeginPeriod
timeEndPeriod
timeGetTime

Sections

.text
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 823KB - Virtual size: 822KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 406KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc2c2ef39d2308c4750b8acd3058cb7a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

glu32

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

opengl32

user32

winmm

Sections

.text Size: 439KB - Virtual size: 439KB

.data Size: 28KB - Virtual size: 27KB

.rdata Size: 823KB - Virtual size: 822KB

.pdata Size: 16KB - Virtual size: 16KB

.xdata Size: 15KB - Virtual size: 14KB

.bss Size: - Virtual size: 406KB

.idata Size: 12KB - Virtual size: 11KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 6KB - Virtual size: 6KB

/4 Size: 4KB - Virtual size: 3KB

/19 Size: 246KB - Virtual size: 245KB

/31 Size: 39KB - Virtual size: 39KB

/45 Size: 97KB - Virtual size: 97KB

/57 Size: 28KB - Virtual size: 28KB

/70 Size: 2KB - Virtual size: 1KB

/81 Size: 31KB - Virtual size: 31KB

/97 Size: 116KB - Virtual size: 116KB

/113 Size: 5KB - Virtual size: 5KB

.text
Size: 439KB - Virtual size: 439KB

.data
Size: 28KB - Virtual size: 27KB

.rdata
Size: 823KB - Virtual size: 822KB

.pdata
Size: 16KB - Virtual size: 16KB

.xdata
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 406KB

.idata
Size: 12KB - Virtual size: 11KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 6KB - Virtual size: 6KB

/4
Size: 4KB - Virtual size: 3KB

/19
Size: 246KB - Virtual size: 245KB

/31
Size: 39KB - Virtual size: 39KB

/45
Size: 97KB - Virtual size: 97KB

/57
Size: 28KB - Virtual size: 28KB

/70
Size: 2KB - Virtual size: 1KB

/81
Size: 31KB - Virtual size: 31KB

/97
Size: 116KB - Virtual size: 116KB

/113
Size: 5KB - Virtual size: 5KB