346d2e3ac6ca33c2c35ae218554f351fe2b109f0e29619ab992a73ae52e24121_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

346d2e3ac6ca33c2c35ae218554f351fe2b109f0e29619ab992a73ae52e24121_NeikiAnalytics.exe
Size

728KB
MD5

446f5d4b973854bd63bfd780138bae40
SHA1

b0dade1c4d68d61043f70a3938a3feeee8d33ccc
SHA256

346d2e3ac6ca33c2c35ae218554f351fe2b109f0e29619ab992a73ae52e24121
SHA512

486023dcbce32eecc119c1b461c0b142d1c4435d8039853b941fea15c729ccdc62d63b3c380c75f7f57c31cc3a9871086960496a307184c1151f406bf812b48d
SSDEEP

12288:aOV84ODmixSMGpNGGPtk0BQApEkCwHrXYXh36t6Y:lV84/ixTgIEtTQA8wax6UY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
346d2e3ac6ca33c2c35ae218554f351fe2b109f0e29619ab992a73ae52e24121_NeikiAnalytics.exe

Files

346d2e3ac6ca33c2c35ae218554f351fe2b109f0e29619ab992a73ae52e24121_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

1787e14bc8f201f7fb9a9a69d05e4029

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoUninitialize

wsock32

listen
bind
inet_addr
shutdown
gethostname
setsockopt
recv
gethostbyaddr
gethostbyname
WSACleanup
closesocket
send
WSAGetLastError
connect
socket
ioctlsocket
htons
WSAStartup

advapi32

AddAccessAllowedAce
AddAce
AllocateAndInitializeSid
CloseEventLog
CloseServiceHandle
ControlService
CreateServiceA
DeleteAce
DeleteService
FreeSid
GetLengthSid
GetServiceKeyNameA
GetUserNameA
InitializeAcl
InitializeSecurityDescriptor
LogonUserA
OpenEventLogA
OpenSCManagerA
OpenServiceA
QueryServiceConfigA
QueryServiceStatus
ReadEventLogA
RegCloseKey
RegConnectRegistryA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetKeySecurity
RegSetValueExA
SetFileSecurityA
SetSecurityDescriptorDacl
StartServiceA

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA

user32

AppendMenuA
BringWindowToTop
CallNextHookEx
CallWindowProcA
CharUpperA
CheckDlgButton
CheckRadioButton
CloseClipboard
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeleteMenu
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawEdge
DrawTextA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EnumChildWindows
EnumWindows
FillRect
FindWindowA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItemInt
GetDlgItemTextA
GetDlgItem
GetDlgItemTextW
GetFocus
GetKeyState
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringA
GetMenu
GetMessageA
GetNextDlgGroupItem
GetParent
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindow
HideCaret
InsertMenuA
InvalidateRect
IsDlgButtonChecked
IsWindowEnabled
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadMenuA
LoadStringA
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
RemoveMenu
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageA
SetClipboardData
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenuItemInfoA
SetParent
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
wsprintfA

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateFontA
CreateFontIndirectA
CreatePatternBrush
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExtTextOutA
ExtTextOutW
GetBitmapBits
GetDeviceCaps
GetObjectA
GetPixel
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceA
GetTextMetricsA
LineTo
MoveToEx
SelectObject
SetBkColor
SetBkMode
SetTextColor

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushConsoleInputBuffer
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameA
GetComputerNameW
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetCurrentThread
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemDirectoryA
GetSystemTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVersion
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
ReadConsoleInputA
ReadFile
SearchPathA
SetConsoleCtrlHandler
SetConsoleMode
SetCurrentDirectoryA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleA
WriteFile
WritePrivateProfileStringA
WritePrivateProfileStringW
lstrcmpA
lstrcpyA
lstrlenA

wininet

HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryOptionA
InternetReadFile
InternetSetOptionA

comctl32

ord17
CreatePropertySheetPageA
CreateToolbarEx
ImageList_LoadImageA
InitCommonControlsEx
PropertySheetA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winspool.drv

EnumPrintersA

mgmtapi

SnmpMgrClose
SnmpMgrOpen
SnmpMgrRequest
SnmpMgrStrToOid

snmpapi

SnmpUtilMemAlloc
SnmpUtilOidCpy
SnmpUtilOidFree
SnmpUtilOidNCmp
SnmpUtilVarBindListFree

netapi32

NetApiBufferFree
NetServerDiskEnum
NetShareAdd
NetShareGetInfo
NetWkstaGetInfo

resutils

ResUtilFindSzProperty

clusapi

CloseClusterGroup
CloseClusterResource
CloseCluster
ClusterCloseEnum
ClusterEnum
ClusterGroupCloseEnum
ClusterGroupEnum
ClusterGroupOpenEnum
ClusterOpenEnum
ClusterResourceControl
GetClusterResourceState
OpenCluster
OpenClusterGroup
OpenClusterResource

Exports

Exports

DevicePropSheetProc
xxK7xx

Sections

AUTO
Size: 491KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 120KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 32KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1787e14bc8f201f7fb9a9a69d05e4029

Headers

File Characteristics

Imports

ole32

wsock32

advapi32

shell32

user32

gdi32

kernel32

wininet

comctl32

version

winspool.drv

mgmtapi

snmpapi

netapi32

resutils

clusapi

Exports

Exports

Sections

AUTO Size: 491KB - Virtual size:

.idata Size: 9KB - Virtual size:

DGROUP Size: 120KB - Virtual size:

.bss Size: 32KB - Virtual size:

.edata Size: 512B - Virtual size:

.reloc Size: 36KB - Virtual size:

.rsrc Size: 70KB - Virtual size:

AUTO
Size: 491KB - Virtual size:

.idata
Size: 9KB - Virtual size:

DGROUP
Size: 120KB - Virtual size:

.bss
Size: 32KB - Virtual size:

.edata
Size: 512B - Virtual size:

.reloc
Size: 36KB - Virtual size:

.rsrc
Size: 70KB - Virtual size: