3446a4d007bbad8f5e7e1683b04fd740_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3446a4d007bbad8f5e7e1683b04fd740_NeikiAnalytics.exe
Size

273KB
MD5

3446a4d007bbad8f5e7e1683b04fd740
SHA1

4110d0e4f495cfdcf58f93edb1d0330a0dcd4a8a
SHA256

7d3660a564931bce39025ce5754ab544d0057efb1d8192c85a1a6a49ed4df5a6
SHA512

491f6242f483913c5234eb1d9561d7555e6f4bbadd01c9ad14bff0ff0f5f3f4c360caf743122eaad41abc9dcf5d3ff6b8538f602028fd1cc9727fa1a0b0cf960
SSDEEP

3072:BqEUkkmHhg4gxPFTdnUy3oq6ieU1GVmKT1Ku6O8v4yG6v5hlfvCqh4QL98+P:BqvkX+VtTdUyYq6i1GEKzf6/lBh4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3446a4d007bbad8f5e7e1683b04fd740_NeikiAnalytics.exe

Files

3446a4d007bbad8f5e7e1683b04fd740_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

48146060ec6a5d8a2deb5a0181d1e8e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\yhong\Project_Git\07_EasyInstall\master\EasyInsatll\x64\Release\EasyInstallfr.pdb

Imports

kernel32

RtlLookupFunctionEntry
RtlUnwindEx
Sleep
ExitProcess
RaiseException
RtlPcToFileHeader
HeapSize
HeapQueryInformation
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapFree
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
HeapAlloc
GetCommandLineA
FlsSetValue
lstrlenA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
FormatMessageW
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
lstrlenW
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalUnlock
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetCurrentProcessId
CloseHandle
GlobalAddAtomW
GlobalFindAtomW
LoadLibraryA
GetLastError
GetVersionExA
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
HeapSetInformation
GetProcAddress

user32

LoadCursorW
GetSysColorBrush
DestroyMenu
ShowWindow
SetWindowTextW
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnregisterClassW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetMenuItemBitmaps
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetClassInfoW
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
GetMessageW
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
GetWindowLongW
GetMenu
PtInRect
CopyRect
CallWindowProcW
DefWindowProcW
SendMessageW
GetDlgCtrlID
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
GetMenuCheckMarkDimensions

gdi32

DeleteDC
GetStockObject
GetDeviceCaps
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SelectObject

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48146060ec6a5d8a2deb5a0181d1e8e6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 10KB - Virtual size: 33KB

.pdata Size: 10KB - Virtual size: 9KB

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 10KB - Virtual size: 33KB

.pdata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 10KB - Virtual size: 9KB