960f7ddc80063009b68e03c01d649b8be12c91841fa19cddfb47a8a171fa0a66_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

960f7ddc80063009b68e03c01d649b8be12c91841fa19cddfb47a8a171fa0a66_NeikiAnalytics.exe
Size

3.1MB
MD5

93f3b95611bf570f1c65ba936593f7e0
SHA1

4d0c6844304f4cbbef20c0dde8501b172239a56a
SHA256

960f7ddc80063009b68e03c01d649b8be12c91841fa19cddfb47a8a171fa0a66
SHA512

e88180e53ec3f66234ede8eff8649773b48a801bb4af783cc24a5edeb2bab678d4d2c5cb0e6580ac42a836a6d1d78a78794ab5385eabe7d0abfec2386581846d
SSDEEP

49152:QLadgzA6Zv5KS8g7RQsqBzesDtPDO3QKz5up1KXwBA6xL3WovXUf1Ft:OXv5KWMDaz51oA6xL1vXeL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960f7ddc80063009b68e03c01d649b8be12c91841fa19cddfb47a8a171fa0a66_NeikiAnalytics.exe

Files

960f7ddc80063009b68e03c01d649b8be12c91841fa19cddfb47a8a171fa0a66_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

a080d4b1049d3264b7e61bbc9192dac8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

krushutilities

GetDataStreamFactory

kernel32

WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetStringTypeW
CreatePipe
GetConsoleOutputCP
CreateFileW
MoveFileExW
GetFileAttributesExW
GetExitCodeProcess
GetTimeZoneInformation
DeleteFileW
GetDriveTypeW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetStdHandle
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
ReleaseSRWLockExclusive
GetTempFileNameA
FlsAlloc
GetFileType
SetStdHandle
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
CreateProcessW
ExitProcess
GetFullPathNameW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
GetTempPathW
QueryPerformanceFrequency
TryAcquireSRWLockExclusive
RaiseException
OutputDebugStringW
AcquireSRWLockExclusive
FlsSetValue
GetProfileIntA
GetTickCount64
SearchPathA
FindResourceExW
GetWindowsDirectoryA
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetCPInfo
GetOEMCP
VirtualProtect
GetACP
FileTimeToSystemTime
lstrcmpiA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
DeleteFileA
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
CopyFileA
LocalFree
GlobalUnlock
GlobalSize
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
GetModuleHandleA
ResumeThread
CompareStringA
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
lstrcmpA
GlobalDeleteAtom
GlobalLock
LoadLibraryW
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
GetVersionExA
GetCurrentThreadId
GetCurrentThread
OutputDebugStringA
FormatMessageA
GetProcAddress
lstrcpynA
MultiByteToWideChar
GetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
GetFileSize
GetFileAttributesA
GetTempPathA
SetCurrentDirectoryA
SetLastError
GetModuleFileNameA
TerminateThread
MulDiv
GlobalFree
GlobalAlloc
FindResourceA
SetCommState
SetCommTimeouts
CreateEventA
SetCommMask
GetOverlappedResult
ClearCommError
CloseHandle
GetCommState
CreateFileA
WaitCommEvent
SetupComm
WaitForSingleObject
PurgeComm
WriteFile
ReadFile
GetProcessHeap
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
LCMapStringA
LoadLibraryA
FreeLibrary
GetStringTypeExA
WriteConsoleW
GetUserDefaultLCID
SetThreadPriority
EscapeCommFunction
GetCommModemStatus
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryW
FlsGetValue

user32

SetCapture
IsZoomed
EnumDisplayMonitors
LoadCursorW
SetLayeredWindowAttributes
LoadImageW
TrackMouseEvent
MapDialogRect
GetAsyncKeyState
GetMenuItemInfoA
DestroyMenu
CharUpperA
DestroyIcon
LoadCursorA
GetSysColorBrush
GetSystemMetrics
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoA
WindowFromPoint
IntersectRect
InflateRect
DrawStateA
MapVirtualKeyA
GetKeyNameTextA
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetWindowDC
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
ReleaseCapture
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
IsIconic
EndDeferWindowPos
SetClassLongPtrA
SetParent
DrawEdge
DrawFrameControl
LoadIconW
EnableWindow
BringWindowToTop
SetWindowLongA
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
UpdateLayeredWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
GetDesktopWindow
EnableScrollBar
UnionRect
MonitorFromPoint
GetNextDlgGroupItem
DrawFocusRect
LoadImageA
DrawIconEx
GetIconInfo
EmptyClipboard
HideCaret
InvertRect
OpenClipboard
CloseClipboard
SetClipboardData
LoadMenuW
GetSystemMenu
SetWindowRgn
MessageBeep
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
GetPropA
SetMenuDefaultItem
SetTimer
KillTimer
GetClientRect
LoadStringA
UnregisterClassA
InvalidateRect
GetParent
GetWindowLongA
GetWindowTextA
ClientToScreen
GetDlgCtrlID
GetClassNameA
ScreenToClient
EnumChildWindows
SetWindowPos
GetWindowRect
CopyImage
DrawTextExA
TabbedTextOutA
GrayStringA
DrawTextA
FillRect
GetCursorPos
PtInRect
GetSysColor
GetKeyState
RedrawWindow
GetActiveWindow
ReleaseDC
SetRectEmpty
IsRectEmpty
OffsetRect
GetDC
CopyRect
SubtractRect
FindWindowExA
MessageBoxA
PostMessageA
PostQuitMessage
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
ValidateRect
SetWindowsHookExA
CallNextHookEx
ShowOwnedPopups
SetCursor
IsWindowEnabled
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
SetActiveWindow
SetCursorPos
CopyIcon
FrameRect
DrawIcon
GetWindowPlacement
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
RegisterClipboardFormatA
CharUpperBuffA
ModifyMenuA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
PostThreadMessageA
WaitMessage
GetComboBoxInfo
IsCharLowerA
MapVirtualKeyExA
GetDoubleClickTime
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetWindowRgn
DestroyCursor
CreateMenu
SendMessageA

gdi32

SetTextColor
GetWindowExtEx
ExtTextOutA
CreateCompatibleBitmap
GetBkColor
GetObjectA
CreateFontIndirectA
GetStockObject
Rectangle
GetTextExtentPoint32A
CreateBitmap
CopyMetaFileA
SetBkColor
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
TextOutA
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CombineRgn
SetRectRgn
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
GetRgnBox
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceA
GetViewportExtEx
LPtoDP
GetTextMetricsA
Escape
GetMapMode
PtVisible
DPtoLP
BitBlt
SelectObject
CreateCompatibleDC
GetDeviceCaps
DeleteDC
DeleteObject
CreateDCA
SetWindowExtEx
RectVisible
CreateFontA

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

DragFinish
DragQueryFileA
SHAppBarMessage
ShellExecuteA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHGetSpecialFolderLocation

shlwapi

PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA

uxtheme

GetCurrentThemeName
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
GetThemePartSize

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CreateStreamOnHGlobal

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocStringLen
OleLoadPicture
VariantCopy
VarBstrFromDate
LoadTypeLi
SysAllocString
SysAllocStringByteLen

ws2_32

inet_addr
gethostbyname
recvfrom
WSAGetLastError
sendto
setsockopt
ioctlsocket
bind
inet_ntoa
send
listen
select
WSAIoctl
accept
recv
shutdown
closesocket
socket
htons
htonl

gdiplus

GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipAlloc
GdipDisposeImage
GdipFree
GdiplusStartup
GdipCloneImage

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Exports

Exports

GetPluginFactory

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a080d4b1049d3264b7e61bbc9192dac8

Headers

DLL Characteristics

File Characteristics

Imports

krushutilities

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

ws2_32

gdiplus

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 637KB - Virtual size: 637KB

.data Size: 34KB - Virtual size: 64KB

.pdata Size: 106KB - Virtual size: 105KB

.rsrc Size: 42KB - Virtual size: 41KB

.reloc Size: 65KB - Virtual size: 64KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 637KB - Virtual size: 637KB

.data
Size: 34KB - Virtual size: 64KB

.pdata
Size: 106KB - Virtual size: 105KB

.rsrc
Size: 42KB - Virtual size: 41KB

.reloc
Size: 65KB - Virtual size: 64KB