42ebb2eb780751d2853ba4c41715a5cc8cfad834ce215778ca6defbfa6154e42_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

42ebb2eb780751d2853ba4c41715a5cc8cfad834ce215778ca6defbfa6154e42_NeikiAnalytics.exe
Size

513KB
MD5

3fc57d3722dc15855e3fd400ecba96b0
SHA1

68b2c4b06cb984339d616e64315bdf62bbf8ace8
SHA256

42ebb2eb780751d2853ba4c41715a5cc8cfad834ce215778ca6defbfa6154e42
SHA512

1c58a5636f6b132efc70009bfa5fe819103e68ad3d3531949aafe41abb070985bfe1fd28f70b96ee68fb29ddec987fa7d3f291166b6441d32804d80af2de28aa
SSDEEP

6144:mo5VbYDI0IJqoIys15IoGe4becYITPb20r61Qv6e5+l3Kh+ghba7+H8:mo59YEYyGh4bXDWYnh+gh27m8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ebb2eb780751d2853ba4c41715a5cc8cfad834ce215778ca6defbfa6154e42_NeikiAnalytics.exe

Files

42ebb2eb780751d2853ba4c41715a5cc8cfad834ce215778ca6defbfa6154e42_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

d39aa10fe8853da7bf0a1f35f013718a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFullPathNameW
GlobalMemoryStatus
TlsGetValue
GetLocaleInfoA
GetSystemDefaultUILanguage
WaitNamedPipeA
GlobalLock
GetSystemTimeAsFileTime
GetPrivateProfileStringW
GetUserDefaultLangID
FlushFileBuffers
GetTempPathW
FindFirstFileA
GetLastError
LockResource
DeleteFileW
lstrcpyW
HeapFree
WideCharToMultiByte
GetLocalTime
GetSystemDefaultLangID
EnumResourceNamesW
FindFirstFileW
SetEndOfFile
VerSetConditionMask
GetCurrentProcess
WaitForSingleObject
ExpandEnvironmentStringsA
FormatMessageW
FileTimeToSystemTime
GetFileType
ResumeThread
GetStringTypeW
GetWindowsDirectoryW
GetVersion
GetCurrentProcessId
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
HeapReAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
CloseHandle
GetModuleFileNameW
WriteFile
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStdHandle
HeapSize
EnumSystemLocalesW
EnterCriticalSection
VirtualAlloc
SetLastError
RaiseException
GetSystemDirectoryA
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
GetTempFileNameW
GetEnvironmentVariableW
EncodePointer
FileTimeToLocalFileTime
FindNextFileA
GetDiskFreeSpaceW
GlobalFree
SetCommState
VirtualQueryEx
GetTickCount
SetErrorMode
VerifyVersionInfoW
GetDriveTypeW
DeleteCriticalSection
GetThreadPriority
CreateFileMappingA
TlsSetValue
GetModuleHandleExW
LoadLibraryExW
ExitProcess
GetProcessHeap
IsDebuggerPresent
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
DecodePointer
LeaveCriticalSection
MultiByteToWideChar
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RtlUnwind
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress

user32

CharUpperBuffW
LoadStringA
GetMenuStringW
GetMenuItemInfoW
LoadMenuW
DrawStateW
PostMessageW
InflateRect
GetMenu
CreateDialogIndirectParamA
SetDlgItemInt
CharUpperW
SetWindowTextW
SetMenuItemInfoW
SendDlgItemMessageW
CheckMenuRadioItem
DrawMenuBar
GetDC
MessageBoxA
DestroyCursor
GetDesktopWindow
EnumChildWindows
InsertMenuW
BeginDeferWindowPos
GetDlgItemTextW
GetWindowThreadProcessId

gdi32

GetRgnBox
CombineRgn
GetCharABCWidthsW
CreateFontIndirectW
GetTextExtentPointW
SetViewportExtEx
PolyPolygon
SetLayout
SetWindowExtEx
ExtCreateRegion
Polygon
PlayEnhMetaFile
OffsetRgn
GetBkColor
CreateHatchBrush

advapi32

RegDeleteValueA
RegCloseKey
AdjustTokenPrivileges
RegEnumKeyExW
SetSecurityDescriptorOwner
RegDeleteKeyA
ControlService
RegSetKeySecurity
RegConnectRegistryW
RegQueryValueExW
RegQueryInfoKeyW
OpenSCManagerW
LookupPrivilegeValueW

shell32

CommandLineToArgvW
Shell_NotifyIconW
SHGetFileInfoW

oleaut32

SafeArrayGetUBound
VariantInit

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d39aa10fe8853da7bf0a1f35f013718a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

Sections

.text Size: 395KB - Virtual size: 395KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 18KB - Virtual size: 1.0MB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 395KB - Virtual size: 395KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 18KB - Virtual size: 1.0MB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 15KB - Virtual size: 15KB