5e578e9bd8db2a408053cb07644d3e90_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5e578e9bd8db2a408053cb07644d3e90_NeikiAnalytics.exe
Size

6.7MB
MD5

5e578e9bd8db2a408053cb07644d3e90
SHA1

369dabe40dddc5ac26157c1ff70acce64fb3e9de
SHA256

55161f93e2919bfffe0dc821567a8ec1c36d7d72ccfd09809321991dc9fd06ca
SHA512

a961a78eb307868b6720f5e3c585f5773850f2ae301aed17c46fe75d26f869fa07ac3e1875871e033d2852b4495436d8f5c62af269244cf8ea3360379e31ab14
SSDEEP

196608:+MsgEZ+x1t1GshUqgqehvBypSKs3c2SvO+L0mnR:SZ+x1t1GshUVlByUKs3cVvOu0mnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e578e9bd8db2a408053cb07644d3e90_NeikiAnalytics.exe

Files

5e578e9bd8db2a408053cb07644d3e90_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

96a68b5e99e9ac00c1a11ac3137af320

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
LoadLibraryExW
SetDllDirectoryW
SystemTimeToFileTime
GlobalLock
GetCurrentThread
SetCommState
IsValidLocale
GetExitCodeProcess
TerminateProcess
GetPrivateProfileIntW
SetThreadLocale
GetCPInfoExW
QueryDosDeviceW
GetModuleFileNameA
WinExec
OpenFileMappingA
EnumSystemLocalesW
ResumeThread
SwitchToThread
Sleep
MapViewOfFile
WriteConsoleW
SetStdHandle
LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
FindFirstFileW
GlobalMemoryStatus
GetDateFormatW
ExitProcess
SuspendThread
GetSystemTime
TlsAlloc
GetLocalTime
GetStringTypeW
VerifyVersionInfoW
CreateNamedPipeA
GlobalUnlock
WritePrivateProfileStringW
GetVersionExW
ReadProcessMemory
SizeofResource
GetCurrentProcess
WaitNamedPipeA
SystemTimeToTzSpecificLocalTime
RtlCaptureContext
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapAlloc
GetProcessHeap
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileW

user32

SendDlgItemMessageW
GetMessageW
ShowWindow
CreateWindowExW
UpdateWindow
EnumWindows
MapWindowPoints
GetWindowTextW
CharUpperW
LoadMenuW
DrawMenuBar
BeginDeferWindowPos
SendMessageW
EndMenu
ToUnicode
EndPaint
CharNextW
GetSubMenu
GetDC
CheckMenuRadioItem
GetDesktopWindow

gdi32

CreateHatchBrush
GetRegionData
GetObjectW
CombineRgn
CreateBitmapIndirect
SetROP2
SetWinMetaFileBits
SetTextColor

comdlg32

FindTextW

advapi32

RegEnumKeyExW
RegSetKeySecurity
SetSecurityDescriptorOwner
ChangeServiceConfigW
RegOpenKeyExA
RegCloseKey
ControlService
OpenServiceW
RegUnLoadKeyW

shell32

ShellExecuteExW
ExtractIconExW

ole32

CoInitialize

oleaut32

VariantInit
SysFreeString
SafeArrayPtrOfIndex
VariantChangeType

Sections

.text
Size: 702KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96a68b5e99e9ac00c1a11ac3137af320

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 702KB - Virtual size: 702KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 5KB - Virtual size: 4KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 702KB - Virtual size: 702KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 5KB - Virtual size: 4KB

.reloc
Size: 14KB - Virtual size: 14KB