1428a7066df14ee3f411ea08d79d6da914d9a2111b5a1b52ee375ebd02a3f798_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1428a7066df14ee3f411ea08d79d6da914d9a2111b5a1b52ee375ebd02a3f798_NeikiAnalytics.exe
Size

664KB
MD5

98ea5a426f56b68f92f43d8ce9fecb20
SHA1

5aa04d52dc9470bf16a74db22f451388d14d78d6
SHA256

1428a7066df14ee3f411ea08d79d6da914d9a2111b5a1b52ee375ebd02a3f798
SHA512

955f694c65e333bba6051f24d48a40837475914de51e8753c7a183e85105ec072d634d7cb03f1c46bb740e24679bc029375c08d73382a6a817b1203a0f961e3d
SSDEEP

12288:7h5Z9HPk144k7Gj/gPCbirruM4z/g9qzlt81xwXjKRZJGA:N9vk144kM/eCer6M4TqqJt8MjET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1428a7066df14ee3f411ea08d79d6da914d9a2111b5a1b52ee375ebd02a3f798_NeikiAnalytics.exe

Files

1428a7066df14ee3f411ea08d79d6da914d9a2111b5a1b52ee375ebd02a3f798_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

b0a59b58ff5b305f51abe2e6206df762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA

ws2_32

WSAStartup

winmm

timeGetTime
mixerClose
mixerGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetControlDetailsA
mixerSetControlDetails

msvfw32

DrawDibClose
DrawDibOpen
DrawDibDraw

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

kernel32

SetFileTime
GetFileTime
GetSystemTime
CreateDirectoryW
CopyFileA
CopyFileW
GlobalSize
MoveFileW
DeleteFileW
ReadFile
GetFileSize
SetFilePointer
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetComputerNameW
GetSystemDirectoryW
GetWindowsDirectoryW
SetEnvironmentVariableW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrcpynA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LocalFree
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
lstrcmpA
GetCurrentThread
RaiseException
InitializeCriticalSection
DeleteCriticalSection
FlushFileBuffers
LockFile
UnlockFile
GetFileAttributesExW
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
FileTimeToLocalFileTime
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
GlobalReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
LocalFileTimeToFileTime
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetDriveTypeA
PeekNamedPipe
GetFileType
GetStartupInfoA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetFileAttributesExA
GetFileAttributesW
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
MoveFileExW
LoadLibraryW
MoveFileExA
OpenFile
GetFileInformationByHandle
GetCurrentDirectoryA
SetFileAttributesA
MoveFileA
CreateDirectoryA
GetUserDefaultLangID
CreateThread
WaitForSingleObject
WriteFile
GetComputerNameA
SetThreadExecutionState
GetFileAttributesA
FormatMessageA
GetPriorityClass
SetPriorityClass
SetEnvironmentVariableA
GetCommandLineA
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
SizeofResource
MulDiv
GetTickCount
SetLastError
GetCommandLineW
RemoveDirectoryA
GetShortPathNameA
FindClose
FindFirstFileA
FindNextFileA
GetModuleFileNameW
GetTempPathW
CreateFileW
CreateFileA
GetCurrentProcess
GetProcessTimes
FreeResource
FindResourceA
LoadResource
LockResource
_lopen
_llseek
_lread
GlobalAlloc
GlobalLock
_lclose
GlobalHandle
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
DeleteFileA
GetLocalTime
LoadLibraryA
GetProcAddress
FreeLibrary
CreateProcessA
OpenProcess
GetExitCodeProcess
Sleep
CloseHandle
InterlockedDecrement
GetTempPathA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcatA
SetCurrentDirectoryA
GetPrivateProfileStringA
InterlockedIncrement
GetLastError
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
CompareStringW
GetEnvironmentVariableA
MultiByteToWideChar
GetVersion
GetEnvironmentVariableW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
SystemTimeToFileTime
FileTimeToSystemTime
SetEndOfFile

user32

EndPaint
wsprintfA
DestroyMenu
GetSysColorBrush
LoadCursorA
CharNextA
IsRectEmpty
CopyAcceleratorTableA
InvalidateRect
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckDlgButton
GetMenuState
WinHelpA
GetCapture
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
DispatchMessageA
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
BeginPaint
GetClassInfoA
UnregisterClassA
PostQuitMessage
CallWindowProcA
OffsetRect
IntersectRect
GetWindowPlacement
CopyRect
ChangeDisplaySettingsA
EnumDisplaySettingsW
ChangeDisplaySettingsW
MessageBoxW
GetWindow
GetSysColor
FindWindowW
GetDesktopWindow
PtInRect
GetDlgItem
LoadStringA
RedrawWindow
SendNotifyMessageA
SetSysColors
ExitWindowsEx
EnumChildWindows
RegisterClassA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsChild
GetWindowLongA
SetWindowLongA
GetFocus
IsIconic
IsWindowVisible
BringWindowToTop
GetWindowThreadProcessId
PostMessageA
GetThreadDesktop
GetUserObjectInformationA
EnumWindows
OpenDesktopA
SetThreadDesktop
CloseDesktop
SetWindowPos
SetWindowTextW
SetWindowTextA
GetWindowTextW
GetWindowTextA
KillTimer
GetCursorPos
SetTimer
RegisterWindowMessageA
ShowCursor
GetParent
LoadImageA
GetSystemMetrics
GetClientRect
FillRect
GetDC
ReleaseDC
SystemParametersInfoA
SendDlgItemMessageA
MessageBoxA
SetRect
GetWindowRect
CreateWindowExA
FindWindowExA
ShowWindow
SetWindowsHookExA
WaitForInputIdle
FindWindowA
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
SetFocus
DestroyWindow
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
SetCursor
UnhookWindowsHookEx
IsWindow
SendMessageA
GetForegroundWindow
SetActiveWindow
CallNextHookEx
EnableWindow
CharUpperA
SetMenuItemBitmaps
ModifyMenuA
GetDlgCtrlID
EnableMenuItem
DefWindowProcA
GetTopWindow

gdi32

PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
SetStretchBltMode
GetViewportExtEx
DPtoLP
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetMapMode
DeleteObject
CreatePalette
GetTextMetricsA
GetStockObject
SetTextColor
SetBkColor
TextOutA
BitBlt
SelectPalette
RealizePalette
CreateDIBitmap
GetObjectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteDC
SetDIBitsToDevice
RestoreDC
SaveDC
GetClipBox
CreateFontA
CreateSolidBrush
GetDeviceCaps
GetDIBColorTable
CreateHalftonePalette

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetOpenFileNameW
ChooseColorA
GetSaveFileNameW
GetFileTitleA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteValueW
RegQueryValueA
GetUserNameW
RegSetValueExW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumValueW
RegEnumValueA
RegEnumKeyW
RegEnumKeyA
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetUserNameA
RegDeleteValueA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

SHFileOperationW
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteA
SHGetMalloc
SHGetFileInfoA
SHFileOperationA
ShellExecuteW

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
UrlUnescapeA

oledlg

ord8

ole32

CLSIDFromString
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID

oleaut32

VariantCopy
SysAllocStringLen
OleCreateFontIndirect
SysAllocStringByteLen
VariantInit
VariantChangeType
VariantClear
SysStringLen
OleLoadPicture
SysReAllocStringLen
SysReAllocString
SysAllocString
SysFreeString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

wininet

InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
HttpQueryInfoA
InternetQueryDataAvailable
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
FtpFindFirstFileA
InternetFindNextFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
FtpPutFileA
FtpGetFileA
InternetGetLastResponseInfoA
InternetConnectA
InternetOpenA
InternetCloseHandle

Exports

Exports

mApplication_FunctionTable
mFTP_FunctionTable
mFile_FunctionTable
mRegistry_FunctionTable
mSystem_FunctionTable

Sections

.text
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0a59b58ff5b305f51abe2e6206df762

Headers

File Characteristics

Imports

version

ws2_32

winmm

msvfw32

rpcrt4

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 408KB - Virtual size: 406KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 28KB - Virtual size: 124KB

Shared Size: 4KB - Virtual size: 8B

.rsrc Size: 132KB - Virtual size: 130KB

.text
Size: 408KB - Virtual size: 406KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 28KB - Virtual size: 124KB

Shared
Size: 4KB - Virtual size: 8B

.rsrc
Size: 132KB - Virtual size: 130KB