01e729d2827ae192eb506e6053381a80891205c24e54e2bfa56bc254a7bf018d_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

01e729d2827ae192eb506e6053381a80891205c24e54e2bfa56bc254a7bf018d_NeikiAnalytics.exe
Size

1.7MB
MD5

370be9821c7f7336955cbfb6b9bc27a0
SHA1

f69683d4c40331adfaf19d23e8d2bd544786b579
SHA256

01e729d2827ae192eb506e6053381a80891205c24e54e2bfa56bc254a7bf018d
SHA512

d691ad70374906b11e907c8e17b17a1bf5a002f2312b0da8f65d090a12d3915a1230a416a5207be7d428a093376e6ff3c4086e66b5f8d5c2f96ecbfd9df1e255
SSDEEP

24576:ApEqqVMZZ6yaJmLmBRBcfNLDtyARCqsRCq:QxqWZZ6uLm3CV9HRCqsRCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01e729d2827ae192eb506e6053381a80891205c24e54e2bfa56bc254a7bf018d_NeikiAnalytics.exe

Files

01e729d2827ae192eb506e6053381a80891205c24e54e2bfa56bc254a7bf018d_NeikiAnalytics.exe
.exe windows:6 windows x64 arch:x64

9cbb2714ce03e4386a98abf6af55a9bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\DixelU\Documents\GitHub\SAFC\x64\Release\SAFC.pdb

Imports

kernel32

GlobalMemoryStatus
GetConsoleWindow
GlobalLock
GetProcAddress
GetLocalTime
LoadLibraryW
CloseHandle
Sleep
WaitForSingleObject
GetModuleFileNameW
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetCurrentProcess
SetPriorityClass
GetACP
IsValidCodePage
HeapReAlloc
ReadConsoleW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
GetFileType
GetFileSizeEx
GetCommandLineW
GetCommandLineA
GetStdHandle
ExitThread
GetModuleHandleExW
ExitProcess
RaiseException
RtlPcToFileHeader
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleA
CreateFileA
FlushFileBuffers
ReadFile
WriteFile
GetCommState
GetCommTimeouts
SetCommState
SetCommTimeouts
BuildCommDCBA
WaitForSingleObjectEx
SwitchToThread
GetCurrentThreadId
GetNativeSystemInfo
MultiByteToWideChar
LocalFree
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
CreateFileW
DeleteFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetLastError
SetLastError
GetModuleHandleW
MoveFileExW
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
RtlUnwind

user32

GetDC
FindWindowA
LoadCursorW
SetClassLongPtrA
ShowWindow
GetCursorPos
SetCursor
SetCursorPos
DefWindowProcA
RegisterClassA
UnregisterClassA
GetClassInfoA
CreateWindowExA
DestroyWindow
SetWindowPos
IsIconic
ReleaseDC
SetWindowTextA
GetClientRect
GetWindowRect
AdjustWindowRectEx
ShowCursor
ClientToScreen
CopyRect
OffsetRect
GetWindowLongA
SetWindowLongA
GetMonitorInfoA
EnumDisplayMonitors
GetSystemMetrics
GetDesktopWindow
LoadCursorA
LoadIconA
ScreenToClient
SetRect
TrackMouseEvent
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetMessagePos
SendMessageA
PostQuitMessage
IsZoomed
GetKeyState
GetKeyboardState
ToAscii
SetCapture
ReleaseCapture
MsgWaitForMultipleObjects
UpdateWindow
SetActiveWindow
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
ChildWindowFromPoint
MonitorFromWindow
GetRawInputData
GetRawInputDeviceInfoA
RegisterRawInputDevices
ChangeDisplaySettingsExA
EnumDisplaySettingsA

gdi32

GetDeviceCaps
DeleteDC
CreateDCA
SwapBuffers
GetPixelFormat
DescribePixelFormat
GetGlyphOutlineW
SelectObject
CreateFontA
ChoosePixelFormat
SetPixelFormat

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

advapi32

RegOpenKeyA
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegGetValueW
RegOpenKeyExW

shell32

DragAcceptFiles
ShellExecuteExW
ShellExecuteW

ole32

RegisterDragDrop
OleInitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

urlmon

URLDownloadToFileW

glu32

gluOrtho2D

opengl32

wglMakeCurrent
glPointSize
glViewport
glClear
wglUseFontBitmapsW
glVertexPointer
glTexCoordPointer
glNormalPointer
glGetFloatv
glEnableClientState
glDrawElements
glDrawArrays
glDisableClientState
glTranslatef
glPushClientAttrib
glPopClientAttrib
glPixelStorei
glBitmap
glVertex2i
glRasterPos2i
glPushMatrix
glPopMatrix
glOrtho
glDisable
glColor4fv
glGetString
glGetError
glGetIntegerv
glGetBooleanv
glReadBuffer
glDrawBuffer
glPopAttrib
glFlush
wglGetProcAddress
wglGetCurrentDC
wglGetCurrentContext
wglDeleteContext
wglCreateContext
glPushAttrib
glShadeModel
glDeleteLists
glColor4f
glListBase
glColor4ub
glRotatef
glRasterPos2f
glVertex2f
glClearColor
glBegin
glHint
glLoadIdentity
glBlendFunc
glLineWidth
glCallLists
glMatrixMode
glGenLists
glEnd
glEnable

winmm

timeGetTime
joyGetPosEx
timeBeginPeriod
timeEndPeriod
joyGetDevCapsA

Sections

.text
Size: 805KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 530KB - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cbb2714ce03e4386a98abf6af55a9bc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

version

urlmon

glu32

opengl32

winmm

Sections

.text Size: 805KB - Virtual size: 804KB

.rdata Size: 279KB - Virtual size: 279KB

.data Size: 54KB - Virtual size: 461KB

.pdata Size: 39KB - Virtual size: 39KB

_RDATA Size: 9KB - Virtual size: 8KB

.rsrc Size: 530KB - Virtual size: 529KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 805KB - Virtual size: 804KB

.rdata
Size: 279KB - Virtual size: 279KB

.data
Size: 54KB - Virtual size: 461KB

.pdata
Size: 39KB - Virtual size: 39KB

_RDATA
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 530KB - Virtual size: 529KB

.reloc
Size: 11KB - Virtual size: 10KB