34c60b5743764929d142da65c2f1ece81dbce4ab6dc72cab9e90cb09517b83c8_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

34c60b5743764929d142da65c2f1ece81dbce4ab6dc72cab9e90cb09517b83c8_NeikiAnalytics.exe
Size

2.9MB
MD5

fde85fe95ff2f5bb77be0c11d6094190
SHA1

7397dbdf1eb503531aa75b2c626cdbf14eb3af81
SHA256

34c60b5743764929d142da65c2f1ece81dbce4ab6dc72cab9e90cb09517b83c8
SHA512

c32868997fbbee4e0b0d2244a1e78a8f11568235d0067fa56595ee69989f7810aa216ebb60c3386d8629357676ae13b9936456bbc3a4601b4b101a4f9a1ee3b6
SSDEEP

24576:6n9XMKQw/CeNOtHRt4usn0TFVu0QaaYVVI3bR0wQvrXBm:69HQUCeEtcus0/QaRubRQvrR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34c60b5743764929d142da65c2f1ece81dbce4ab6dc72cab9e90cb09517b83c8_NeikiAnalytics.exe

Files

34c60b5743764929d142da65c2f1ece81dbce4ab6dc72cab9e90cb09517b83c8_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

a9f0fe51127960ed1ec231685324d9e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

ClosePrinter
SetPrinterA
EnumPrintersA
OpenPrinterA
GetPrinterA
DocumentPropertiesA

shlwapi

PathFileExistsA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shfolder

SHGetFolderPathA

ltwvc12n

?IsItem@LDictionary@@QAEIPAX@Z
?Select@LTwain@@UAEHXZ
?UnloadLibraries@LBase@@SAXK@Z
?UnlockSupport@LSettings@@SAXIPAD@Z
?LoadLibraries@LBase@@SAKK@Z
??1LBitmap@@UAE@XZ
??0LBitmap@@QAE@XZ
??1LBitmapBase@@UAE@XZ
??0LBitmapBase@@QAE@XZ
?SetDC@LDraw@@QAEPAUHDC__@@PAU2@@Z
?SetTextParameters@LPaintEffect@@QAEHPAU_TEXTDLGPARM@@@Z
?CloseSession@LTwain@@UAEHXZ
?GetProperties@LTwain@@UAEHPAUtagTWAINPROPERTIES@@@Z
?SetProperties@LTwain@@UAEHPAUtagTWAINPROPERTIES@@K@Z
?EnumSources@LTwain@@UAEHXZ
?IsAvailable@LTwain@@UAEIXZ
?Acquire@LTwain@@UAEHI@Z
?EnumSourcesCallBack@LTwain@@MAEHPAEH@Z
?SetBitmap@LScanner@@UAEXPAVLBitmapBase@@@Z
?SetWindow@LScanner@@UAEXPAUHWND__@@@Z
?StatusCallBack@LBase@@MAEHH@Z
??1LTwain@@UAE@XZ
?EnableCallBack@LBase@@QAEII@Z
??0LTwain@@QAE@XZ
?IsAllocated@LBitmapBase@@QAEIXZ
?BitmapDictionary@@3VLBitmapDictionary@@A

kernel32

GetTimeZoneInformation
CreateThread
ExitThread
SetStdHandle
GetFileType
HeapSize
FatalAppExitA
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetSystemTime
GetLocalTime
CompareStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetEnvironmentVariableA
SetConsoleCtrlHandler
GetLocaleInfoW
GetCommandLineA
SizeofResource
RaiseException
HeapAlloc
HeapReAlloc
TerminateProcess
ExitProcess
HeapFree
RtlUnwind
SetErrorMode
lstrcpyW
CopyFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
CompareStringA
Sleep
GlobalFlags
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GetProfileStringA
GetTempFileNameA
GetFileAttributesA
OpenFile
GetTempPathA
lstrcpynA
EnterCriticalSection
LeaveCriticalSection
lstrcatA
GetModuleHandleA
GetShortPathNameA
lstrlenA
lstrlenW
HeapDestroy
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
ReleaseMutex
WinExec
GetUserDefaultLCID
GetLocaleInfoA
CreateMutexA
GetLastError
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
MulDiv
lstrcpyA
GetVersionExA
GlobalSize
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetThreadLocale
GetStringTypeExA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
GetFileTime
SetFileTime
GetFullPathNameA
GetTickCount
GetCurrentThread
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetProfileIntA
VirtualProtect
FileTimeToLocalFileTime
FileTimeToSystemTime
SetLastError
FormatMessageA
LocalFree
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryA
OutputDebugStringA
GetLogicalDriveStringsA
GetDiskFreeSpaceA
GetFileSize
FindResourceA
LoadResource
LockResource
lstrcmpA
GetPrivateProfileStructA
WritePrivateProfileStructA
WritePrivateProfileStringA
LocalAlloc
DeleteFileA
GlobalReAlloc
CreateProcessA
GetACP
GetVersion
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
ReadFile
CloseHandle
GetPrivateProfileStringA
GetVolumeInformationA
GetPrivateProfileIntA
GetDriveTypeA
GetStartupInfoA

user32

IsClipboardFormatAvailable
CopyAcceleratorTableA
FindWindowA
IsZoomed
CharUpperA
SetCursorPos
GetMenuStringA
InsertMenuA
SetParent
WindowFromDC
InSendMessage
SetWindowContextHelpId
DestroyIcon
PostQuitMessage
WindowFromPoint
TranslateMessage
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDCEx
GetMessageA
MapDialogRect
GetAsyncKeyState
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
LoadStringA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
PeekMessageA
DispatchMessageA
DeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindowPlacement
SetScrollPos
GetWindowTextLengthA
GetWindowTextA
wvsprintfA
OemToCharA
CharToOemA
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
PostThreadMessageA
SetForegroundWindow
MoveWindow
IsChild
IsIconic
DrawIcon
GetTabbedTextExtentA
GetActiveWindow
SetWindowRgn
DeleteMenu
SetWindowLongA
CreateWindowExA
ShowWindow
BeginDeferWindowPos
EndDeferWindowPos
SetFocus
LoadAcceleratorsA
AdjustWindowRectEx
CheckMenuItem
wsprintfA
MessageBeep
MapWindowPoints
CreatePopupMenu
ShowScrollBar
RedrawWindow
SendDlgItemMessageA
GetDlgItem
ChildWindowFromPointEx
ChildWindowFromPoint
AppendMenuA
CheckMenuRadioItem
GetMenu
GetMenuItemCount
EnableMenuItem
GetSystemMenu
LoadImageA
EqualRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindow
SetWindowPos
SetTimer
PostMessageA
CreateMenu
WaitMessage
GetWindowThreadProcessId
ClipCursor
GetClassNameA
GetDialogBaseUnits
GetSysColorBrush
GetNextDlgGroupItem
RemoveMenu
LockWindowUpdate
LoadMenuA
GetSubMenu
GetFocus
KillTimer
DestroyCursor
ShowOwnedPopups
IsWindow
GetSystemMetrics
RegisterClipboardFormatA
GetKeyState
OffsetRect
CopyRect
IntersectRect
IsRectEmpty
FillRect
GetCursorPos
ScreenToClient
InflateRect
ReleaseDC
CharNextA
GetDlgCtrlID
ClientToScreen
GetDesktopWindow
LoadBitmapA
GetDC
ReleaseCapture
SetCapture
UpdateWindow
GetParent
GetCapture
GetClientRect
DrawFocusRect
SystemParametersInfoA
LoadIconA
SetRect
LoadCursorA
SetCursor
PtInRect
IsWindowVisible
RegisterWindowMessageA
EnableWindow
InvalidateRect
GetSysColor
SendMessageA
GetWindowRect
SetRectEmpty
InvertRect
IsWindowEnabled
MessageBoxA
GetScrollPos
TranslateAcceleratorA
DefDlgProcA
IsWindowUnicode
HideCaret
ShowCaret
ExcludeUpdateRgn
UnregisterClassA

gdi32

SelectObject
GetTextAlign
CreatePenIndirect
StrokePath
RealizePalette
BitBlt
GetTextMetricsA
GetTextFaceA
Rectangle
SetPixel
Arc
CreatePen
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPointA
GetObjectA
GetViewportOrgEx
LPtoDP
PatBlt
ResetDCA
GetMapMode
CreateEnhMetaFileA
CloseMetaFile
SetPixelV
CreatePatternBrush
GetStockObject
DPtoLP
ExtTextOutA
GetCurrentObject
GetCharABCWidthsA
GetTextColor
StretchDIBits
CreateBrushIndirect
ExtCreatePen
Ellipse
CreateCompatibleDC
CreateCompatibleBitmap
Polygon
CreateSolidBrush
SetBrushOrgEx
SetMapMode
EndPath
GetTextExtentPoint32A
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SetROP2
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
CreateHatchBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
Escape
SetRectRgn
UnrealizeObject
CreateDCA
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
GetWindowOrgEx
DeleteMetaFile
GetCharWidthA
CreateFontA
CreateMetaFileA
CopyMetaFileA
GetStretchBltMode
GetPolyFillMode
GetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocA
SetTextColor
GetClipBox
GetDCOrgEx
SelectPalette
CreateDIBitmap
GetPixel
GetNearestColor
SetBkColor
EnumFontFamiliesA
GetBkColor
EnumFontFamiliesExA
Chord
SetStretchBltMode
ExtCreateRegion
CombineRgn
DeleteDC
DeleteObject
CreateBitmap
CreateDIBSection
GdiFlush
GetDIBColorTable
CreatePalette
CreateHalftonePalette
StretchBlt
SetViewportOrgEx
GetBkMode
BeginPath
CreateRectRgnIndirect

comdlg32

GetFileTitleA
PageSetupDlgA
PrintDlgA
CommDlgExtendedError
ChooseFontA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA

advapi32

RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

shell32

DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
SHGetPathFromIDListA
ShellExecuteA
DragAcceptFiles
SHGetMalloc
SHBrowseForFolderA

comctl32

DestroyPropertySheetPage
PropertySheetA
ord17
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord14
ord13
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Replace
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragShowNolock
CreatePropertySheetPageA

oledlg

ord5
ord3
ord7
ord6
ord1
ord9
ord4
ord8

ole32

WriteClassStm
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
ReleaseStgMedium
OleSave
StgCreateDocfileOnILockBytes
OleSaveToStream
CreateStreamOnHGlobal
OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleGetIconOfClass
OleIsCurrentClipboard
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateOleAdviseHolder
CreateDataAdviseHolder
CoGetClassObject
CoRegisterMessageFilter
OleDuplicateData
SetConvertStg
GetClassFile
StgIsStorageFile
ReadFmtUserTypeStg
OleTranslateAccelerator
OleCreateFromFile
CreateItemMoniker
CoLockObjectExternal
WriteClassStg
GetRunningObjectTable
CreateFileMoniker
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
OleRun
StringFromCLSID
OleLoad
OleQueryLinkFromData
OleQueryCreateFromData
ReadClassStg
CreateBindCtx
CreateGenericComposite
OleSetMenuDescriptor
OleLockRunning
OleCreate
OleCreateLinkToFile
OleCreateFromData
OleCreateStaticFromData
OleCreateLinkFromData
CoTaskMemAlloc
OleSetContainedObject
StgCreateDocfile
DoDragDrop
CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
CoGetMalloc
StgOpenStorage
CoTreatAsClass
WriteFmtUserTypeStg
OleIsRunning

olepro32

ord253

oleaut32

SysAllocStringLen
VariantCopy
VariantClear
SysStringByteLen
SysReAllocStringLen
VariantInit
VariantTimeToSystemTime
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
VariantChangeType
SafeArrayRedim
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
LoadTypeLi
SysAllocString
SafeArrayCreate
SysStringLen
LoadRegTypeLi
SafeArrayDestroyDescriptor
RegisterTypeLi
SysFreeString
GetErrorInfo
SetErrorInfo
CreateErrorInfo

msvfw32

DrawDibOpen
DrawDibDraw
DrawDibClose

Sections

.text
Size: 920KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9f0fe51127960ed1ec231685324d9e2

Headers

File Characteristics

Imports

winspool.drv

shlwapi

version

shfolder

ltwvc12n

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

msvfw32

Sections

.text Size: 920KB - Virtual size: 918KB

.rdata Size: 216KB - Virtual size: 213KB

.data Size: 44KB - Virtual size: 64KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.text
Size: 920KB - Virtual size: 918KB

.rdata
Size: 216KB - Virtual size: 213KB

.data
Size: 44KB - Virtual size: 64KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB