56af7cf3ca37756225489a27f73eed23f49f0aa31b26808ff0e4ac060c5df40d_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

56af7cf3ca37756225489a27f73eed23f49f0aa31b26808ff0e4ac060c5df40d_NeikiAnalytics.exe
Size

9.9MB
MD5

d240e5fa43c849ba952e7521f65d8460
SHA1

49dc77803576a3b2b866c093c4934d80bc7c7d8e
SHA256

56af7cf3ca37756225489a27f73eed23f49f0aa31b26808ff0e4ac060c5df40d
SHA512

9c4cc4d0cc9913ae66127641ef20aa757b24e861a961ce2d9e0184b761801d634edbe000305d64ef2c1b3f953d2389eac4b036552d8a194a56930cd3bf85fdd9
SSDEEP

196608:tZcA5ffbTAUtccuqzy5nKTpXFQwEAqmS5waXMH:vcA5ffH/SqzyKXFQvAuwaXMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56af7cf3ca37756225489a27f73eed23f49f0aa31b26808ff0e4ac060c5df40d_NeikiAnalytics.exe

Files

56af7cf3ca37756225489a27f73eed23f49f0aa31b26808ff0e4ac060c5df40d_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

2e05acb624e3bb1461517d6450fb5689

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

excel.pdb

Imports

advapi32

RegCloseKey
RegEnumValueW
RegOpenKeyExW
GetLengthSid
FreeSid
EqualSid
LookupAccountNameW
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
AllocateAndInitializeSid
LookupAccountSidW
GetAce
RevertToSelf
AccessCheck
MapGenericMask
OpenThreadToken
ImpersonateSelf
GetSecurityDescriptorLength
GetAclInformation
GetSecurityDescriptorDacl
SetEntriesInAclW
GetExplicitEntriesFromAclW
BuildTrusteeWithSidW
OpenProcessToken
MakeSelfRelativeSD
MakeAbsoluteSD
GetPrivateObjectSecurity
SetPrivateObjectSecurity
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegOpenKeyA
RegQueryValueExW

gdi32

GetStockObject
CreateSolidBrush
SetWindowExtEx
SetViewportExtEx
SetWindowOrgEx
DPtoLP
LPtoDP
SetMapMode
SetTextColor
SetBkColor
SaveDC
RestoreDC
IntersectClipRect
GetRgnBox
CombineRgn
SetRectRgn
ExcludeClipRect
GetClipBox
GetPaletteEntries
GetNearestPaletteIndex
GetTextFaceW
GetTextMetricsW
SetBkMode
SetROP2
SetBrushOrgEx
GetNearestColor
CreateCompatibleBitmap
GetDIBits
GetBkColor
GetTextColor
EnumFontFamiliesW
GetViewportExtEx
GetWindowExtEx
GetMapMode
CreatePatternBrush
SetBitmapBits
CreateDIBPatternBrush
GetWindowOrgEx
BitBlt
CreateBitmap
CreateBrushIndirect
CreateHatchBrush
CreatePen
ExtCreatePen
PlayMetaFileRecord
PlayEnhMetaFileRecord
DeleteMetaFile
DeleteEnhMetaFile
MoveToEx
GetCurrentPositionEx
LineTo
PatBlt
Ellipse
Arc
Pie
DeleteDC
CreateCompatibleDC
StretchBlt
CreatePolygonRgn
Escape
Polygon
CreateRectRgn
CreateRectRgnIndirect
CloseMetaFile
EnumMetaFile
CreateMetaFileW
SetMetaFileBitsEx
GetWinMetaFileBits
GetEnhMetaFileHeader
SetWinMetaFileBits
GetMetaFileBitsEx
PlayEnhMetaFile
EnumEnhMetaFile
GdiComment
ScaleViewportExtEx
SetPixel
GetPixel
GetBitmapBits
Polyline
GdiFlush
RealizePalette
SelectPalette
CreatePalette
GetSystemPaletteEntries
SetDIBits
CreateDIBSection
RoundRect
Rectangle
CreateRoundRectRgn
OffsetRgn
PaintRgn
GetTextExtentPointA
GetCharWidthA
SetTextAlign
GetTextAlign
GetCurrentObject
SetMapperFlags
EnumObjects
UnrealizeObject
EndDoc
AbortDoc
ExtEscape
EndPage
StretchDIBits
SetStretchBltMode
SetAbortProc
StartPage
CreateICW
InvertRgn
GetEnhMetaFileBits
SetEnhMetaFileBits
GetObjectType
CopyEnhMetaFileW
CopyMetaFileW
CreateDIBitmap
CreateFontIndirectW
GetObjectW
GetTextExtentPointW
GetCharWidthW
ExtTextOutW
ExtTextOutA
GetClipRgn
GetTextExtentExPointW
TextOutW
GetTextExtentPoint32W
SetViewportOrgEx
CreateFontA
CreateBitmapIndirect
GetObjectA
SelectClipRgn
GetDeviceCaps
EnumFontsW
GetTextCharsetInfo
DeleteObject
SelectObject
GetOutlineTextMetricsW

kernel32

SetLastError
GetModuleFileNameW
OutputDebugStringA
GetCurrentThreadId
GetCurrentProcessId
GetVersionExA
WinExec
GetSystemDefaultLCID
MulDiv
GetVersionExW
lstrlenW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
IsDBCSLeadByte
IsDBCSLeadByteEx
GetACP
GetDriveTypeW
GetFileSize
GlobalSize
GetFileTime
SetFileTime
GetVolumeInformationW
LockFile
UnlockFile
GetCurrentDirectoryW
MoveFileW
DeleteFileW
SetFilePointer
SetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
WriteFile
CreateFileW
SearchPathW
CloseHandle
ReadFile
GlobalReAlloc
SetEnvironmentVariableW
SetCurrentDirectoryW
GetTickCount
SetErrorMode
GetShortPathNameW
LoadResource
FindResourceW
GetLocalTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FreeLibrary
GlobalHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
LCMapStringW
GetStringTypeW
CompareStringA
IsBadReadPtr
lstrcmpW
RaiseException
GetUserDefaultLCID
GetOEMCP
lstrcmpiA
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocaleInfoW
LocalAlloc
LocalFree
GetCurrentThread
GlobalAddAtomW
LoadLibraryA
GetTempPathW
GetCurrentProcess
WideCharToMultiByte
GetCommandLineW
MultiByteToWideChar
GetWindowsDirectoryW
GetTempFileNameW
IsBadWritePtr
SetUnhandledExceptionFilter
TerminateProcess
VirtualAlloc
GetSystemTime
CreateMutexW
InterlockedIncrement
InterlockedDecrement
ReleaseMutex
WaitForSingleObject
GetEnvironmentVariableW
GetSystemDefaultLangID
LockResource
SizeofResource
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TerminateThread
InitializeCriticalSection
SetThreadPriority
CreateThread
VirtualFree
IsValidCodePage
EnumSystemLocalesW
EnumCalendarInfoW
FreeResource
GetFullPathNameW
GetLogicalDrives
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SetHandleCount
OpenFile
LoadLibraryExA
GetStartupInfoA
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
VirtualProtect
UnhandledExceptionFilter
GetDriveTypeA
GetVolumeInformationA
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FormatMessageA
GetSystemDirectoryW
LoadLibraryExW
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetLastError
InterlockedExchange

ole32

CoInitialize
OleQueryLinkFromData
CreateDataAdviseHolder
OleRegGetUserType
CreateOleAdviseHolder
CoRegisterClassObject
CoRevokeClassObject
CoFreeUnusedLibraries
OleQueryCreateFromData
CoUninitialize
CoRegisterMessageFilter
OleCreateFromData
GetHGlobalFromILockBytes
OleIsCurrentClipboard
CoCreateGuid
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleSetMenuDescriptor
ReadClassStm
CoTreatAsClass
SetConvertStg
OleTranslateAccelerator
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
OleSave
IsAccelerator
OleSetContainedObject
CoGetClassObject
OleSaveToStream
WriteClassStm
CoTaskMemAlloc
OleLoadFromStream
OleLoad
OleCreateLinkToFile
OleCreateFromFile
OleCreate
CoFileTimeNow
CreateItemMoniker
OleGetIconOfClass
CoIsOle1Class
CoGetMalloc
GetRunningObjectTable
CreateFileMoniker
StgSetTimes
ReadClassStg
CoDisconnectObject
CreateGenericComposite
OleIsRunning
ProgIDFromCLSID
OleRun
CreateBindCtx
OleCreateLink
OleCreateLinkFromData
ReleaseStgMedium
MkParseDisplayName
CoTaskMemFree
CoLockObjectExternal
CreateStreamOnHGlobal
GetHGlobalFromStream
StgIsStorageFile
StgCreateDocfile
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoCreateInstance
ReadFmtUserTypeStg
GetClassFile
StringFromGUID2
StgOpenStorage
CoCreateInstanceEx
WriteClassStg
StringFromCLSID
OleGetClipboard
OleSetClipboard
OleFlushClipboard
WriteFmtUserTypeStg
CLSIDFromString

user32

CharUpperBuffA
MessageBoxA
CharUpperW
UnpackDDElParam
SendMessageTimeoutW
PackDDElParam
GetDoubleClickTime
GetWindowDC
DestroyAcceleratorTable
MessageBoxW
GetSysColor
SetForegroundWindow
ShowWindow
EndDeferWindowPos
DeferWindowPos
SetWindowPos
ScreenToClient
GetWindowRect
SystemParametersInfoW
RegisterClassW
MonitorFromRect
SendMessageW
FillRect
GetClientRect
SetWindowLongW
SetWindowPlacement
GetWindowPlacement
IsIconic
GetWindow
GetWindowLongW
SetActiveWindow
PtInRect
GetSystemMetrics
UnhookWindowsHookEx
SetKeyboardState
GetKeyboardState
SetWindowsHookExW
ReleaseDC
GetDC
LoadIconW
LoadCursorW
SetMessageQueue
RegisterWindowMessageA
IntersectRect
IsRectEmpty
GetMonitorInfoW
MonitorFromPoint
MonitorFromWindow
SetRect
InvalidateRect
BeginPaint
EndPaint
GetWindowTextW
GetUpdateRgn
InvalidateRgn
ValidateRect
ValidateRgn
SetCapture
ReleaseCapture
GetCapture
SetFocus
EnableWindow
IsWindowEnabled
UpdateWindow
DispatchMessageW
FlashWindow
GetClassLongW
GetFocus
BeginDeferWindowPos
GetTopWindow
GetParent
ClientToScreen
GetUpdateRect
SetClassLongW
UnionRect
AdjustWindowRectEx
ShowCaret
HideCaret
RegisterClassExW
ExcludeUpdateRgn
ScrollDC
IsWindowVisible
GetSystemMenu
GetActiveWindow
PeekMessageW
IsChild
DestroyWindow
IsWindow
InSendMessage
VkKeyScanW
GetClassNameW
GetQueueStatus
GetKeyState
GetAsyncKeyState
GetInputState
SetTimer
KillTimer
PostQuitMessage
GetCursorPos
MapVirtualKeyW
TranslateMessage
WaitMessage
MsgWaitForMultipleObjects
RegisterClipboardFormatW
SetCursor
ShowCursor
MessageBeep
OpenIcon
GetWindowThreadProcessId
FindWindowW
EnumDisplayMonitors
SetRectEmpty
CreateMenu
DestroyMenu
DrawMenuBar
GetMenuItemID
GetMenuItemCount
DeleteMenu
RemoveMenu
GetSubMenu
GetMenuState
EnableMenuItem
SetScrollPos
CallWindowProcW
GetDlgItem
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollInfo
GetWindowWord
SetWindowWord
EnumThreadWindows
CloseClipboard
EmptyClipboard
SetCaretPos
GetKeyboardLayout
SetClipboardData
GetClipboardData
OpenClipboard
GetClipboardOwner
EnumClipboardFormats
IsClipboardFormatAvailable
CreateCaret
DestroyCaret
GetCaretPos
GetMessageExtraInfo
OffsetRect
InflateRect
PostMessageW
CloseDesktop
GetUserObjectInformationW
OpenInputDesktop
GetThreadDesktop
CharUpperBuffW
IsCharUpperW
SetWindowTextA
IsWindowUnicode
PeekMessageA
DispatchMessageA
CreateWindowExW
DrawTextW
DrawTextA
GetMessageW
SetParent
WindowFromPoint
GetMessageTime
GetScrollInfo
SendMessageA
UnregisterClassW
MoveWindow
PostMessageA
GetMessagePos
SetCursorPos
GetClipboardFormatNameW
FreeDDElParam
GetDesktopWindow
EqualRect
ArrangeIconicWindows
RedrawWindow
DrawFocusRect
ToUnicode
ToAscii
GetMenu
IsZoomed
EnumChildWindows
CharLowerBuffW
RegisterWindowMessageW
CharUpperA
CharLowerW
ActivateKeyboardLayout
DrawIconEx
DestroyIcon
DrawIcon
GetCursor
SetMenu
CreateAcceleratorTableW
MapWindowPoints
GetForegroundWindow
DefWindowProcW
SetWindowTextW
DrawFrameControl
LoadCursorFromFileW
GetIconInfo
CallNextHookEx
GetKeyboardLayoutList

msvcrt

exit
memmove
rand
srand
_wtoi
wcslen
atof
_ecvt
_fpreset
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
__CxxFrameHandler
swprintf
_chdir
_controlfp
_except_handler3

Exports

Exports

DllGetLCID
MdCallBack
_LPenHelper

Sections

.text
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e05acb624e3bb1461517d6450fb5689

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

gdi32

kernel32

ole32

user32

msvcrt

Exports

Exports

Sections

.text Size: 8.5MB - Virtual size: 8.5MB

.data Size: 79KB - Virtual size: 97KB

.cdata Size: 512B - Virtual size: 4B

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 8.5MB - Virtual size: 8.5MB

.data
Size: 79KB - Virtual size: 97KB

.cdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 1.3MB - Virtual size: 1.3MB