49ab62abe2e7bdf360f7e57836f4836abd735f6ee3ac30b7719802ded2e6d7ad_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

49ab62abe2e7bdf360f7e57836f4836abd735f6ee3ac30b7719802ded2e6d7ad_NeikiAnalytics.exe
Size

6.5MB
MD5

9fc305d2fc6b6b623b12ec8410b37af0
SHA1

e05daf52f98a9a464a897227907c338f54899a46
SHA256

49ab62abe2e7bdf360f7e57836f4836abd735f6ee3ac30b7719802ded2e6d7ad
SHA512

57eb8e0fdfcc30c1b2c0b7b0a324aee879311762f7644c00cd6ec02767c925278015a790cfbd3a142849172967cb551860da4c4f80f59455ef086144058c85af
SSDEEP

49152:dp9YLboHejMbePprOBPeJGpbI0B24uHAuvponZrv0mga1Yuem9pGrIY3GPrxzBNg:dp2E55L24kmga1YueYpf0GPrxzLIkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ab62abe2e7bdf360f7e57836f4836abd735f6ee3ac30b7719802ded2e6d7ad_NeikiAnalytics.exe

Files

49ab62abe2e7bdf360f7e57836f4836abd735f6ee3ac30b7719802ded2e6d7ad_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

62595bb06d52ed0999608956c1098e98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\AGS\AGSSource\GIT\GITHUB-AGS\ags\Solutions\.build\Release\acwin.pdb

Imports

quartz

AMGetErrorTextA

winmm

joyGetPosEx
joyGetDevCapsA
joyGetNumDevs
waveOutClose
waveOutWrite
waveOutPause
waveOutGetVolume
waveOutGetPosition
waveOutRestart
waveOutReset
waveOutSetVolume
waveOutUnprepareHeader
waveOutOpen
waveOutPrepareHeader
midiInStop
midiOutGetNumDevs
midiInClose
midiOutSetVolume
midiInReset
midiOutGetDevCapsA
midiInGetDevCapsA
midiInStart
midiInOpen
midiOutClose
midiOutShortMsg
midiOutOpen
midiOutReset
midiInGetNumDevs
timeGetTime
timeEndPeriod
timeBeginPeriod
mciGetErrorStringA
mciSendStringA
midiOutGetVolume

shlwapi

SHSetValueA
SHDeleteKeyA
PathRemoveFileSpecA

opengl32

glMatrixMode
glViewport
glVertexPointer
glReadPixels
glTexParameteri
wglMakeCurrent
glColor4f
glDrawArrays
glShadeModel
glGetString
glDisable
glTexImage2D
glBindTexture
glScalef
glScissor
glOrtho
glTexParameterf
glTexSubImage2D
glClearColor
glClear
glEnableClientState
glTranslatef
glTexCoordPointer
glEnable
wglGetProcAddress
glGenTextures
glLoadIdentity
glBlendFunc
glFinish
glDisableClientState
wglCreateContext
glGetIntegerv
glDeleteTextures

kernel32

GetVersion
DuplicateHandle
ResetEvent
GetThreadPriority
QueryPerformanceFrequency
GetVersionExA
PulseEvent
CreateFileW
FindFirstFileW
WaitForSingleObject
ReleaseMutex
FindResourceA
FreeLibrary
LoadResource
SizeofResource
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
LoadLibraryA
LockResource
GetModuleHandleA
OutputDebugStringA
CreateMutexA
CloseHandle
ResumeThread
CreateThread
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
CreateFileA
PeekNamedPipe
WriteFile
ReadFile
FindFirstFileA
FindClose
FindNextFileA
GetCommandLineW
WideCharToMultiByte
GetShortPathNameW
LocalFree
Sleep
GetModuleFileNameA
GetDiskFreeSpaceExA
GetLastError
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcess
LoadLibraryW
GetCurrentThreadId
GetTempPathA
SetEvent
CreateEventA
InitializeCriticalSection
FindNextFileW
WaitForMultipleObjects
DeleteCriticalSection
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
MoveFileA
GetDriveTypeA
GetFullPathNameA
GetModuleHandleW
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitThread
RtlUnwind
GetCommandLineA
GetStartupInfoA
TerminateProcess
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
GetStdHandle
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
SetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetFileAttributesA
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
CreateProcessA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
GetFullPathNameW
DeleteFileW
DeleteFileA
CreateDirectoryA
SetThreadPriority

user32

GetClientRect
GetDC
SetWindowLongA
GetWindowLongA
EndPaint
ClientToScreen
MsgWaitForMultipleObjects
DestroyWindow
GetMessageA
RegisterWindowMessageA
SetTimer
PostQuitMessage
IsIconic
GetWindowInfo
BeginPaint
CreateWindowExA
PeekMessageA
DefWindowProcA
SetWindowPos
GetActiveWindow
DispatchMessageA
SystemParametersInfoA
UpdateWindow
CallWindowProcA
AdjustWindowRect
RegisterClassA
SetCursor
SetCursorPos
SetForegroundWindow
GetCursorPos
GetSystemMetrics
LoadCursorA
GetKeyNameTextA
ToAscii
GetKeyboardState
InvalidateRect
GetForegroundWindow
CreateIconIndirect
DestroyIcon
GetSystemMenu
ReleaseDC
EnableMenuItem
RedrawWindow
MessageBoxW
SetWindowTextA
GetClassLongA
PostMessageA
GetWindowRect
SendDlgItemMessageA
LoadIconA
SetFocus
SendMessageA
SetClassLongA
GetDlgItem
EndDialog
ShowWindow
EnableWindow
DialogBoxParamA
MoveWindow
MapVirtualKeyA
VkKeyScanA
MessageBoxA
KillTimer

gdi32

SelectPalette
SetPaletteEntries
DeleteDC
SetPixel
CreateBitmap
StretchDIBits
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat
RealizePalette
SwapBuffers
CreatePalette
GetSystemPaletteEntries
BitBlt
DeleteObject
CreateSolidBrush

advapi32

RegSetValueA

shell32

CommandLineToArgvW
SHChangeNotify
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

ole32

CoUninitialize
GetRunningObjectTable
CoTaskMemFree
IIDFromString
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString

ddraw

DirectDrawCreate

dinput

DirectInputCreateA

dsound

ord1
ord2

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62595bb06d52ed0999608956c1098e98

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

quartz

winmm

shlwapi

opengl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ddraw

dinput

dsound

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 232KB - Virtual size: 232KB

.data Size: 123KB - Virtual size: 1.6MB

.rsrc Size: 187KB - Virtual size: 186KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 232KB - Virtual size: 232KB

.data
Size: 123KB - Virtual size: 1.6MB

.rsrc
Size: 187KB - Virtual size: 186KB