5fb424ce8d67d7d991d5cf1b1e59323207f09e3d02d30ee3e85fac7bf031b795_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5fb424ce8d67d7d991d5cf1b1e59323207f09e3d02d30ee3e85fac7bf031b795_NeikiAnalytics.exe
Size

50KB
MD5

380bc72def414e893e87190f166d5590
SHA1

4b606c17224fc3f4a84071852c30768c32030d12
SHA256

5fb424ce8d67d7d991d5cf1b1e59323207f09e3d02d30ee3e85fac7bf031b795
SHA512

02fee19436bc9c6deb2936731243811ebb87f0275acc383da329acb0d2d1858ba6275e42fa905b1ef1a5c2181bf75d3e55e8997fac7ade4ffd1a2637e6ee860a
SSDEEP

768:agZ1Q3ftcT4U+v+3y8DVr/a0SSS/M3+pd7wMQpOiPxXOMJ:agZWOT1KSDVp8d7cpXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb424ce8d67d7d991d5cf1b1e59323207f09e3d02d30ee3e85fac7bf031b795_NeikiAnalytics.exe

Files

5fb424ce8d67d7d991d5cf1b1e59323207f09e3d02d30ee3e85fac7bf031b795_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

f3d425d224e734ce558fd06246c02768

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cncs232

ord143
ord182
ord184
ord176
ord12
ord183
ord50
ord140
ord177
ord137
ord51
ord65

kernel32

OpenFile
_lwrite
LocalFree
LoadResource
FindResourceA
LocalAlloc
_lopen
GlobalFree
_lread
_lclose
GlobalUnlock
FreeResource
LockResource
GlobalLock
GlobalAlloc
HeapFree
WriteFile
WideCharToMultiByte
GetStringTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
MultiByteToWideChar
GetCPInfo
GetModuleFileNameA
GetACP
GetStdHandle
GetStringTypeW
HeapAlloc
GetStartupInfoA
SetHandleCount
VirtualFree
HeapCreate
HeapDestroy
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetModuleHandleA
GetProcAddress
GetCommandLineA
VirtualAlloc
LoadLibraryA
LCMapStringW
GetFileType
LCMapStringA

user32

GetWindowTextA
GetPropA
GetClientRect
DestroyWindow
SetWindowPos
GetFocus
CopyRect
LoadCursorA
SetWindowLongA
CheckDlgButton
GetWindowLongA
EndDialog
IsDlgButtonChecked
GetDlgItem
SetWindowTextA
ReleaseDC
DeleteMenu
SendMessageA
GetMenuItemID
DestroyMenu
GetMenuItemCount
CreatePopupMenu
GetMenuStringA
GetMenuState
EnableWindow
AppendMenuA
GetSubMenu
GetWindowTextLengthA
SetFocus
InvalidateRect
CreateWindowExA
LoadStringA
ShowWindow
LoadMenuA
wsprintfA
GetDC

gdi32

CreateSolidBrush
SetBkColor
SetBkMode
SetTextColor
DeleteObject
GetTextMetricsA
SelectObject
CreateHatchBrush

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA

Exports

Exports

AppendPopup
ContinueRunObject
CreateObject
CreateRunObject
DefaultOI
DestroyRunObject
DisplayRunObject
EditParameter
EditorDisplay
EndModifyObject
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDesc
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetInfos
GetObjInfos
GetObjectCursor
GetObjectRect
GetParameterString
GetRunObjectDataSize
GetRunObjectInfos
HandleRunObject
InitObject
InitParameter
IsTransparent
LoadObject
MakeIcon
ModifyObject
PauseRunObject
PrepareToWriteObject
PutObject
ReInitRunObject
RebuildExt
ReinitObject
RemoveObject
SelectPopup
UnloadObject
UpdateEditStructure
UpdateFileNames
WindowProc

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3d425d224e734ce558fd06246c02768

Headers

File Characteristics

Imports

cncs232

kernel32

user32

gdi32

comdlg32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB