1286afcf076a32cf95954ce3b2b4537ca8566c7a82d2448890aea6706e1516ee_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1286afcf076a32cf95954ce3b2b4537ca8566c7a82d2448890aea6706e1516ee_NeikiAnalytics.exe
Size

82KB
MD5

ae1ee623715d6e0a748c973809725130
SHA1

ac9099295c48daabad3492c67ca6ec76cb3be555
SHA256

1286afcf076a32cf95954ce3b2b4537ca8566c7a82d2448890aea6706e1516ee
SHA512

24b72ed37d54ce60775e4427392eb9106f41008e10b202ae7433a2a1674375654e3a951b5e3aac2eed12fae017c143a41ed07b9d7ef6a966a6eb3928872f4c9a
SSDEEP

1536:W3rwFH1MWqVT7TQlwmTkUAwbrN9uxRuLWnuTG2/pWzIipcPKBs1mvDD7nXH6OAU7:WepA4XTkUIzhuTG2/sL6s7v+WmDnnagy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1286afcf076a32cf95954ce3b2b4537ca8566c7a82d2448890aea6706e1516ee_NeikiAnalytics.exe

Files

1286afcf076a32cf95954ce3b2b4537ca8566c7a82d2448890aea6706e1516ee_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

156fc6ddee5ee80d86fd3753479a17bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
IsDBCSLeadByte
GlobalDeleteAtom
GlobalAddAtomA
CreateProcessA
GetShortPathNameA
WriteProfileStringA
CopyFileA
SystemTimeToFileTime
GetFileTime
GetExitCodeProcess
SetFileAttributesA
GetFileAttributesA
SearchPathA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentThreadId
GetUserDefaultLangID
GetVersionExA
GetModuleHandleA
GetSystemDirectoryA
GetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
lstrcatA
DeleteFileA
lstrlenA
FindResourceA
SizeofResource
LoadResource
LockResource
GetStartupInfoA
FreeResource
lstrcpynA
MultiByteToWideChar
lstrcmpA
lstrcpyA
SetFileTime
SetLastError
CloseHandle
LocalAlloc
CreateFileA
LocalFree
GetFileSize
ReadFile
SetFilePointer
GetLastError
GetVolumeInformationA
WriteFile

user32

SetFocus
CheckDlgButton
KillTimer
EndPaint
DrawIcon
BeginPaint
IsIconic
DestroyIcon
UnhookWindowsHookEx
SetWindowsHookExA
GetClassInfoA
GetSystemMetrics
SendDlgItemMessageA
SetTimer
CharNextA
GetDesktopWindow
GetWindowRect
GetDlgItem
EnableWindow
PackDDElParam
FreeDDElParam
GetDlgItemTextA
MoveWindow
PostMessageA
FindWindowA
WaitForInputIdle
SendMessageA
LoadIconA
SetWindowTextA
CharUpperA
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
DispatchMessageA
wsprintfA
CharLowerA
CharPrevA
EndDialog
MessageBoxA
GetWindowLongA
CallNextHookEx
DialogBoxIndirectParamA
SystemParametersInfoA
TranslateMessage

gdi32

SetMapMode
GetMapMode

comdlg32

GetOpenFileNameA
GetFileTitleA

advapi32

RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueA

shell32

ShellExecuteA

crtdll

strchr
_global_unwind2
memcpy
exit
_local_unwind2
strrchr
atoi
memset
_exit
_XcptFilter
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

156fc6ddee5ee80d86fd3753479a17bf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

crtdll

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 512B - Virtual size: 373B

.data Size: 2KB - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 512B - Virtual size: 373B

.data
Size: 2KB - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 2KB