a22d8c7844da89b9e9a78eee34a165d0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a22d8c7844da89b9e9a78eee34a165d0_NeikiAnalytics.exe
Size

1.3MB
MD5

a22d8c7844da89b9e9a78eee34a165d0
SHA1

a5dbee270f1ad49eaa656a052cfc5899292b9aa4
SHA256

62f5b558406e0cdab7d5f468bf9b765a79db30a998c440e9d4af2ea37427c515
SHA512

7402d427b5b26c8ebc19722a130e8151708cdd2bb8d80a1916ab2dce44cb90e29b88804e5de41a671775a5d55dcb81bbe7a171878148cd171450b4c18d803687
SSDEEP

24576:qlExjvp2YQ+fODoL+BWZ/d/fyioFJJ21IA+DUHHvYYUaTeDf2nMMMMMMFLu:qlExjQ+Ug/fyJFJJ7A+tqTMMMMMM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a22d8c7844da89b9e9a78eee34a165d0_NeikiAnalytics.exe

Files

a22d8c7844da89b9e9a78eee34a165d0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

ddcd8ad32d6e8c3fccc2d0acd2cd2d60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\build\winrar32\Release\WinRAR.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ord8
CreateStatusWindowW
ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_AddMasked
ImageList_Add
PropertySheetW

shlwapi

StrCmpLogicalW
SHAutoComplete

uxtheme

IsAppThemed
IsThemeActive

kernel32

SizeofResource
LoadResource
LoadLibraryExW
GetCurrentProcessId
CompareStringA
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryW
GetFullPathNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
WaitForSingleObject
GetProcessAffinityMask
CreateEventW
CreateSemaphoreW
ReleaseSemaphore
ResetEvent
SetEvent
SystemTimeToFileTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
GetDateFormatW
GetTimeFormatW
FileTimeToLocalFileTime
GetTempPathW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
ReleaseMutex
CreateMutexW
GetDiskFreeSpaceW
FindCloseChangeNotification
FindFirstChangeNotificationW
GetTickCount
CopyFileW
GetCompressedFileSizeW
UpdateResourceW
EnumResourceLanguagesW
FindResourceW
EnumResourceNamesW
BeginUpdateResourceW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
ResumeThread
SuspendThread
GetCurrentThreadId
GetLocalTime
GetThreadPriority
GetPriorityClass
SetErrorMode
MulDiv
CompareFileTime
FindNextChangeNotification
WaitForMultipleObjects
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleHandleA
LCMapStringW
LCMapStringA
HeapSize
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
IsDebuggerPresent
TerminateProcess
VirtualAlloc
VirtualFree
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
GetConsoleMode
GetConsoleCP
RaiseException
ExitThread
RtlUnwind
HeapReAlloc
GetFullPathNameW
GetCurrentDirectoryW
GetVersionExW
FindNextFileW
ExpandEnvironmentStringsW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetDriveTypeW
FlushFileBuffers
GetFileType
GetFileTime
GetStdHandle
GetLongPathNameW
GetShortPathNameW
MoveFileW
FindFirstFileW
FindClose
DeviceIoControl
BackupSeek
BackupRead
FormatMessageW
LocalFree
GetCommandLineW
SetLastError
GetFileInformationByHandle
CreateHardLinkW
GetModuleHandleW
GetCurrentProcess
GetModuleFileNameW
HeapCreate
HeapDestroy
DosDateTimeToFileTime
LocalFileTimeToFileTime
HeapFree
HeapAlloc
Sleep
GetSystemTimeAsFileTime
RemoveDirectoryW
CreateDirectoryW
SetFileAttributesW
DeleteFileW
SetEndOfFile
WriteFile
ReadFile
GetProcAddress
SetFileTime
GetFileAttributesW
CloseHandle
SetFilePointer
GetFileSize
GetLastError
CreateFileW
LoadLibraryW
FreeLibrary
GetProcessHeap
SetEnvironmentVariableA
EndUpdateResourceW

user32

PostThreadMessageW
IsChild
GetLastActivePopup
GetMenuItemID
GetClipboardData
PostQuitMessage
SetMenu
InsertMenuW
LoadMenuW
RegisterClassW
LoadAcceleratorsW
GetMenuState
CopyRect
IsWindow
ValidateRect
GetSysColor
CopyImage
FillRect
DrawIconEx
GetSystemMenu
SetTimer
KillTimer
SystemParametersInfoW
RedrawWindow
GetComboBoxInfo
IsCharUpperW
IsCharAlphaW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBeep
PeekMessageW
GetFocus
EnableMenuItem
CreateDialogParamW
CheckMenuItem
LoadBitmapW
InsertMenuItemW
SetForegroundWindow
UpdateWindow
BeginPaint
EndPaint
GetWindowTextLengthW
DrawMenuBar
GetMenu
GetSubMenu
DeleteMenu
GetMenuItemCount
ScreenToClient
ClientToScreen
CreatePopupMenu
TrackPopupMenu
DestroyMenu
CallWindowProcW
RegisterClipboardFormatW
GetKeyState
LoadCursorW
SetCursor
WindowFromPoint
GetWindowThreadProcessId
GetDC
ReleaseDC
GetDesktopWindow
GetCursorPos
EnableWindow
IntersectRect
SystemParametersInfoA
IsIconic
IsWindowEnabled
SetDlgItemInt
GetDlgItemInt
SetScrollPos
ScrollWindowEx
PtInRect
LoadIconW
SetScrollRange
CreateDialogIndirectParamW
GetPropW
RemovePropW
BringWindowToTop
GetIconInfo
CreateIconIndirect
TranslateAcceleratorW
IsDialogMessageW
SetPropW
FindWindowW
GetForegroundWindow
RegisterWindowMessageW
FindWindowExW
EnumWindows
MoveWindow
CreateIcon
wsprintfW
OemToCharW
OemToCharA
CharToOemBuffA
OemToCharBuffA
CharToOemA
MessageBoxW
CharToOemBuffW
FlashWindow
RegisterClassExW
TranslateMessage
DispatchMessageW
LoadImageW
GetMessageW
IsDlgButtonChecked
ShowWindow
EnumChildWindows
PostMessageW
InvalidateRect
CheckDlgButton
DialogBoxParamW
DestroyIcon
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
GetParent
MapWindowPoints
GetDlgItem
SendDlgItemMessageW
EndDialog
GetDlgItemTextW
SetDlgItemTextW
DestroyWindow
CreateWindowExW
DefWindowProcW
SetFocus
CharUpperW
CharLowerW
ExitWindowsEx
CharLowerA
LoadStringW
GetWindowRect
GetClientRect
SetWindowPos
GetWindowTextW
SetWindowTextW
GetSystemMetrics
GetWindow
GetClassNameW
SendMessageW
GetMenuItemInfoW
SetMenuItemInfoW
GetWindowLongW
SetWindowLongW
AppendMenuW

gdi32

GetDeviceCaps
CreateDIBSection
GetTextExtentPoint32W
LineTo
StretchBlt
Rectangle
SetPixel
CreatePatternBrush
TextOutA
CreateBitmap
GetMapMode
SetMapMode
MoveToEx
CreateCompatibleBitmap
SetBkColor
ExtTextOutW
BitBlt
GetObjectW
CreateCompatibleDC
GetPixel
DeleteDC
CreatePen
CreateSolidBrush
SetTextColor
TextOutW
Polygon
Polyline
SelectObject
GetTextFaceW
GetTextMetricsW
CreateFontW
DPtoLP
DeleteObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW

advapi32

RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
GetSecurityDescriptorLength
GetFileSecurityW
IsTextUnicode
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
SetFileSecurityW
RegCloseKey

shell32

SHAddToRecentDocs
SHGetPathFromIDListW
FindExecutableW
DragFinish
DragQueryFileW
DragAcceptFiles
Shell_NotifyIconW
ShellExecuteW
ord100
SHFileOperationW
ShellExecuteExW
SHBrowseForFolderW
SHChangeNotify
SHGetDesktopFolder
SHGetFileInfoW
SHGetMalloc
SHGetSpecialFolderLocation

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
CoTaskMemAlloc
CLSIDFromString
OleSetClipboard
DoDragDrop
CoInitializeEx

oleaut32

SysAllocString
VariantClear
VariantInit

Sections

.text
Size: 991KB - Virtual size: 990KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddcd8ad32d6e8c3fccc2d0acd2cd2d60

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

shlwapi

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 991KB - Virtual size: 990KB

.rdata Size: 79KB - Virtual size: 78KB

.data Size: 16KB - Virtual size: 672KB

.rsrc Size: 208KB - Virtual size: 208KB

.reloc Size: 54KB - Virtual size: 54KB

.text
Size: 991KB - Virtual size: 990KB

.rdata
Size: 79KB - Virtual size: 78KB

.data
Size: 16KB - Virtual size: 672KB

.rsrc
Size: 208KB - Virtual size: 208KB

.reloc
Size: 54KB - Virtual size: 54KB