2c63d3c78940484ea989d0fda41743131d6c63be16aee6ffe69f3ccd3417a20d_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

2c63d3c78940484ea989d0fda41743131d6c63be16aee6ffe69f3ccd3417a20d_NeikiAnalytics.exe
Size

1.3MB
MD5

cbdae2aa34aee82a604d9446b1883e50
SHA1

b3c8bd32a5d6ff824642bd5c17851b931f7a93d3
SHA256

2c63d3c78940484ea989d0fda41743131d6c63be16aee6ffe69f3ccd3417a20d
SHA512

cb2f89dfdf2a745ea993a65606291b5d227fadb1b65c6cc172372cade3afe8bafe6184b3a9ec774469b2c319b8e84412d516faa65e185338a1caba2246fbd852
SSDEEP

24576:uVx1O3t5z/0HpMXcnbjX+3lBkLkXs7/KOUbB7E9N79jjSWiXmbn8vOxP9zUM9CI:us3//0HBbjX44g1EH79vyXnmxp4CgKX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c63d3c78940484ea989d0fda41743131d6c63be16aee6ffe69f3ccd3417a20d_NeikiAnalytics.exe

Files

2c63d3c78940484ea989d0fda41743131d6c63be16aee6ffe69f3ccd3417a20d_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

dc497914b5fc9c77807949ca2dea0231

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\DejaTools\main\Products\Insight\Bin\Release\DejaInsight.pdb

Imports

kernel32

CreateProcessW
LocalFree
GetCommandLineW
SystemTimeToFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RaiseException
RtlUnwind
GetTimeZoneInformation
GetCurrentDirectoryA
VirtualAlloc
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetTickCount
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
GetSystemTime
SetLastError
TlsFree
GetModuleHandleA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
CreateThread
ExitThread
GetDriveTypeW
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryA
GetProcAddress
GetFullPathNameW
QueryPerformanceFrequency
QueryPerformanceCounter
ResumeThread
TlsAlloc
DuplicateHandle
CloseHandle
CreateMutexW
GetLastError
GetCurrentProcess
GetTempPathW
GetLongPathNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
MulDiv
GetCurrentThreadId
CreateFileW
GetCurrentProcessId
SetUnhandledExceptionFilter
GetModuleFileNameW
FindResourceExW
SizeofResource
LoadResource
LockResource
InterlockedIncrement
InterlockedDecrement
GlobalSize
InterlockedCompareExchange
Sleep
DeviceIoControl
FindFirstFileW
SetFilePointer
MoveFileExW
GetSystemTimeAsFileTime
WriteFile
ReadFile
FlushFileBuffers
FindClose
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
DeleteFileA
TlsGetValue
WaitForSingleObject
SetEvent
GetCurrentThread
InitializeCriticalSection
TlsSetValue
LeaveCriticalSection
SetThreadPriority
ReleaseSemaphore
EnterCriticalSection
ResetEvent
CreateSemaphoreW
GetExitCodeThread
CreateEventW
DeleteCriticalSection

user32

SetDlgItemTextW
SetFocus
GetDC
ReleaseDC
MessageBeep
GetMessageW
GetAsyncKeyState
TranslateMessage
DispatchMessageW
RegisterClipboardFormatW
PeekMessageW
SetWindowLongW
GetWindowLongW
DefWindowProcW
LoadCursorW
RegisterClassExW
RedrawWindow
CloseClipboard
WindowFromPoint
GetFocus
KillTimer
CreateWindowExW
GetDesktopWindow
SetParent
ShowWindow
IsZoomed
BeginDeferWindowPos
DeferWindowPos
MoveWindow
EndDeferWindowPos
GetWindowPlacement
ScreenToClient
ClientToScreen
InvalidateRect
EnableWindow
GetDlgItemTextW
SetWindowTextW
GetCursorPos
SetCapture
ReleaseCapture
SetCursor
GetClientRect
SetTimer
BeginPaint
EndPaint
GetCapture
AdjustWindowRectEx
SetActiveWindow
LoadImageW
DrawTextA
DrawTextW
FillRect
DrawFocusRect
DrawFrameControl
ValidateRect
EnumWindows
RegisterWindowMessageW
SetWindowPlacement
PostQuitMessage
UpdateLayeredWindow
EnumDisplayMonitors
wsprintfA
SetClipboardData
EmptyClipboard
OpenClipboard
GetActiveWindow
SetWindowPos
GetWindowRect
GetParent
SendMessageW
MonitorFromPoint
GetMonitorInfoW
MonitorFromRect
MessageBoxW
LoadIconW
SetClassLongW
SetWindowTextA
GetClipboardData
DestroyWindow

advapi32

RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegCreateKeyExW

shell32

SHGetFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
ord74
SHCreateDirectoryExW
CommandLineToArgvW

ole32

OleInitialize
ReleaseStgMedium
CoCreateInstance
RegisterDragDrop
DoDragDrop
CoInitializeSecurity
RevokeDragDrop
CoInitializeEx
CLSIDFromProgID
CoTaskMemFree

oleaut32

VariantChangeType
VariantInit
VariantClear
SysFreeString
SysAllocString
GetActiveObject
VariantCopy

comctl32

InitCommonControlsEx
_TrackMouseEvent

psapi

GetModuleFileNameExW
GetPerformanceInfo

dbghelp

MiniDumpWriteDump

msimg32

GradientFill
AlphaBlend

uxtheme

GetThemeBackgroundContentRect
OpenThemeData
DrawThemeBackground
CloseThemeData
DrawThemeText

opengl32

glDepthFunc
glAlphaFunc
glLightModeli
glClearDepth
glDisable
glEnable
glLineWidth
glBlendFunc
wglMakeCurrent
wglDeleteContext
glFrustum
wglCreateContext
wglShareLists
glClearColor
glVertex3f
glTexCoordPointer
glNormalPointer
glDrawElements
glColorPointer
glDisableClientState
glDrawArrays
glEnableClientState
glVertexPointer
glRasterPos3f
glEnd
glVertex3fv
glBegin
glColor4fv
glPopMatrix
glCallLists
glBitmap
glRasterPos2f
glListBase
glPushMatrix
wglUseFontBitmapsW
glGenLists
glDeleteTextures
glTexImage2D
glTexParameteri
glTexEnvi
wglGetCurrentDC
wglGetCurrentContext
glDepthMask
glClear
glOrtho
glLoadMatrixf
glFlush
glTranslatef
glViewport
glPixelStorei
glTexParameterf
glTexEnvf
glBindTexture
glGenTextures
wglGetProcAddress
glPolygonOffset
glCullFace
glFrontFace
glColor4f
glMateriali
glMaterialfv
glColorMaterial
glLightfv
glLightModelfv
glLoadIdentity
glMatrixMode
glShadeModel

glu32

gluBuild2DMipmaps

iphlpapi

GetAdaptersAddresses

ws2_32

inet_addr
socket
bind
recv
sendto
setsockopt
shutdown
getpeername
connect
closesocket
send
accept
recvfrom
gethostbyname
WSACleanup
listen
WSAStartup
ntohl
htons
WSAGetLastError

rpcrt4

UuidCreate

gdi32

DeleteDC
DeleteObject
SelectObject
GetDeviceCaps
CreateBitmap
GetGlyphOutlineW
SwapBuffers
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
CreateFontIndirectW
StretchBlt
CreateSolidBrush
CreateCompatibleDC
SetBitmapBits
Arc
LineTo
MoveToEx
SetArcDirection
Polyline
CreatePen
SetPixel
ExtTextOutW
ExtTextOutA
SetTextAlign
GetTextAlign
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
IntersectClipRect
SetBkMode
CreateCompatibleBitmap
GetObjectW
BitBlt
SelectClipRgn
CreateDIBSection

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW

Sections

.text
Size: 861KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc497914b5fc9c77807949ca2dea0231

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

psapi

dbghelp

msimg32

uxtheme

opengl32

glu32

iphlpapi

ws2_32

rpcrt4

gdi32

comdlg32

Sections

.text Size: 861KB - Virtual size: 860KB

.rdata Size: 121KB - Virtual size: 120KB

.data Size: 11KB - Virtual size: 48KB

.rsrc Size: 318KB - Virtual size: 318KB

.reloc Size: 61KB - Virtual size: 61KB

.text
Size: 861KB - Virtual size: 860KB

.rdata
Size: 121KB - Virtual size: 120KB

.data
Size: 11KB - Virtual size: 48KB

.rsrc
Size: 318KB - Virtual size: 318KB

.reloc
Size: 61KB - Virtual size: 61KB