4063bff845b67debc6f7a4be3264f3b3b683ca85083690f0cb9a69747bb6e92d_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4063bff845b67debc6f7a4be3264f3b3b683ca85083690f0cb9a69747bb6e92d_NeikiAnalytics.exe
Size

308KB
MD5

b67d5f1898a4393e073430b3612d53d0
SHA1

42cc05bcdf3027c7b11be9c0151833988c8a3f66
SHA256

4063bff845b67debc6f7a4be3264f3b3b683ca85083690f0cb9a69747bb6e92d
SHA512

61c19db0437c0ba7fc55195e912a939084d5aa515fec09335890c1f6f9ffdd3a0b6615e39828204cbb1454dcaaf23ca978c047d656674728c855c52fa6573759
SSDEEP

6144:WTimpahb+a7aTHvGSLyJao6up42T05lH:winhbCbwH22TE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4063bff845b67debc6f7a4be3264f3b3b683ca85083690f0cb9a69747bb6e92d_NeikiAnalytics.exe

Files

4063bff845b67debc6f7a4be3264f3b3b683ca85083690f0cb9a69747bb6e92d_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x86 arch:x86

cc90ca345921f4dcbc3f6130f169eac7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libxml2

xmlInitParser
xmlCleanupParser
xmlFreeDoc
xmlParseFile
xmlDocGetRootElement
xmlFree
xmlGetProp

kernel32

HeapReAlloc
HeapAlloc
HeapFree
SetEnvironmentVariableA
GetTimeZoneInformation
HeapSize
GetDriveTypeA
GetCommandLineA
GetACP
ExitProcess
TerminateProcess
SetUnhandledExceptionFilter
GetFileType
RaiseException
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapCreate
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
RtlUnwind
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
GetCurrentThread
lstrcmpA
WaitForSingleObject
IsBadReadPtr
IsBadWritePtr
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleA
GetShortPathNameA
lstrlenW
InterlockedIncrement
HeapDestroy
WideCharToMultiByte
ReleaseMutex
LocalAlloc
CreateMutexA
OpenMutexA
LocalFree
GetCurrentProcess
CloseHandle
GetLastError
SetLastError
MultiByteToWideChar
lstrlenA
GlobalReAlloc
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
GetModuleFileNameA
FindNextFileA
FindFirstFileA
FindClose
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
VirtualFree

user32

GetSysColorBrush
LoadCursorA
PtInRect
GetClassNameA
UnregisterClassA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
LoadIconA
PostMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DestroyMenu
AdjustWindowRectEx
GetClientRect
CopyRect
IsWindowVisible
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
DispatchMessageA
GetActiveWindow
DestroyWindow
GetWindowLongA
GetDlgItem
GetParent
GetFocus
IsWindowEnabled
SetFocus
RegisterWindowMessageA
SendMessageA
LoadStringA
GetWindowTextA
GetSystemMetrics
CharUpperA
wsprintfA
CharNextA
EnableWindow
SetForegroundWindow
GetWindow
GetTopWindow

gdi32

Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
DeleteObject
DeleteDC
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
AllocateAndInitializeSid
FreeSid
AddAccessDeniedAce
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl

comctl32

ord17

ole32

CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
VariantInit
SafeArrayCreate
SafeArrayGetDim
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
VariantClear
SysAllocString
SysAllocStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
XEdi2Config
XEdi2ConvertAndSplit
XEdi2ConvertEdiToXml
XEdi2ConvertEdiToXmlStr
XEdi2ConvertInhouseToXml
XEdi2ConvertXmlStrToEdi
XEdi2ConvertXmlToEdi
XEdi2ConvertXmlToInhouse
XEdi2CreateEDIFACTSegment
XEdi2FilterXml
XEdi2GetDocDataElms
XEdi2GetEDIFACTSegDataElms
XEdi2GetInterchangeInfo
XEdi2GetInterchangeInfoEx
XEdi2GetLastError
XEdi2GetLastErrorMsg
XEdi2JoinEdi
XEdi2LastErrorClear
XEdi2LoadSchemas
XEdi2LoadServiceSchema
XEdi2SetDocDataElms
XEdi2SplitEdi
XEdi2SplitEdiInterchgs
XEdi2SplitInh
XEdi2SplitXmlEdi
XEdi2SplitXmlInh
XEdi2TransformXMLDoc
XEdi2ValidateXMLDoc

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc90ca345921f4dcbc3f6130f169eac7

Headers

File Characteristics

Imports

libxml2

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 203KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 20KB - Virtual size: 16KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 204KB - Virtual size: 203KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 20KB - Virtual size: 16KB

.reloc
Size: 24KB - Virtual size: 23KB