5c26afad58c5c5ba493c07a4f2d9f320_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5c26afad58c5c5ba493c07a4f2d9f320_NeikiAnalytics.exe
Size

548KB
MD5

5c26afad58c5c5ba493c07a4f2d9f320
SHA1

d513cf2dfa2ad282932345d54e2ed70721244d77
SHA256

1f0e767ce9f0273ac414cad9dca334a122dc5497d3f06341f50e0726d4938fb0
SHA512

8c7a944725c0b05fac71376cc19051daf379351e9eb19ee1332d2694dab56f1544b01df12220760424a50dbdc1fca6355e7d20401f08d1ac17f16a4fe809cf2c
SSDEEP

12288:lSp9EjfqjXYs6eO899pXHTeFx5QpudapVLEq64i8q6pQq69hROjydr+VT:lSDc3gmnQEQp9EqBi8qwQq2ROur+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c26afad58c5c5ba493c07a4f2d9f320_NeikiAnalytics.exe

Files

5c26afad58c5c5ba493c07a4f2d9f320_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

117a50fb0891070833101cbd73024e8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
SetEndOfFile
WriteFile
GetCurrentProcess
FindResourceExW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExW
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetFullPathNameW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetStdHandle
SetFilePointerEx
ReadConsoleW
GetTimeFormatW
GetDateFormatW
GetConsoleMode
GetConsoleCP
GetStdHandle
GetModuleFileNameA
HeapQueryInformation
GetCommandLineA
GetFileType
GetTimeZoneInformation
GetModuleHandleExW
InterlockedFlushSList
RtlUnwind
GetStringTypeW
LCMapStringW
GetCPInfo
OutputDebugStringW
FlushFileBuffers
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MulDiv
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
FreeResource
GlobalFree
VirtualProtect
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
SetEvent
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetModuleHandleA
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetStartupInfoW
GetCurrentThreadId
GetModuleHandleW
GetVolumeInformationW
GetDiskFreeSpaceW
DeleteFileW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CloseHandle
GetACP
WideCharToMultiByte
MultiByteToWideChar
MoveFileExW
CreateFileW
GetLocalTime
GetCommandLineW
FindResourceW
LoadLibraryW
FormatMessageW
FormatMessageA
LocalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetVersionExW
FindNextFileW
LoadLibraryA
Sleep
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
WriteConsoleW
ExitProcess
FindClose
FindFirstFileW
FreeLibrary
CreateDirectoryW
GetProcAddress

user32

CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetScrollPos
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
IsDialogMessageW
SetWindowLongW
GetDlgCtrlID
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
MapDialogRect
RemovePropW
GetPropW
SetPropW
SetActiveWindow
GetCapture
GetAsyncKeyState
SetFocus
GetDlgItem
ShowWindow
GetLastActivePopup
SendMessageW
GetParent
EnableWindow
UnregisterClassW
IsWindowEnabled
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PtInRect
GetClassLongW
GetClassNameW
GetTopWindow
UnhookWindowsHookEx
LoadIconW
WinHelpW
MonitorFromWindow
GetMonitorInfoW
PeekMessageW
SetWindowPos
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetSystemMetrics
GetDC
ReleaseDC
GetClientRect
MessageBoxA
MessageBoxW
PostMessageW
SetWindowTextA
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetWindowLongW
EnumWindows
GetWindowThreadProcessId
GetWindowRect
GetCursorPos
ClientToScreen
SetCursor
LoadCursorW
SendDlgItemMessageA
SetRectEmpty
OffsetRect
PostQuitMessage
RealChildWindowFromPoint
SetTimer
KillTimer
InvalidateRect
DrawTextW
DestroyMenu
CharUpperW
GetSysColorBrush
TabbedTextOutW
GrayStringW
GetWindow
DrawTextExW
GetFocus
CheckMenuItem
EnableMenuItem

gdi32

DeleteDC
Escape
GetClipBox
GetStockObject
PtVisible
RectVisible
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
EnumFontFamiliesExW
DeleteObject
GetDeviceCaps
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
SelectObject
SaveDC
RestoreDC

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

shell32

ShellExecuteW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid

oleaut32

VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

assembleLayoutThumbnail
exportedHeapusageDiagnostic
initDeviceLoadingBaseCode_02
inkUsage
propertiesWindow
revisionDate
setupDeviceDetails
setupOutputFromBmfHeader
writeDeviceClose
writeDeviceHeader
writeLine

Sections

.text
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

117a50fb0891070833101cbd73024e8f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 385KB - Virtual size: 385KB

.rdata Size: 101KB - Virtual size: 100KB

.data Size: 12KB - Virtual size: 113KB

.gfids Size: 4KB - Virtual size: 4KB

.giats Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 385KB - Virtual size: 385KB

.rdata
Size: 101KB - Virtual size: 100KB

.data
Size: 12KB - Virtual size: 113KB

.gfids
Size: 4KB - Virtual size: 4KB

.giats
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 25KB - Virtual size: 24KB