657b38962e922a20aa5a092f559c76c9c8b597f413f3acec844cb473f0f2c96f_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

657b38962e922a20aa5a092f559c76c9c8b597f413f3acec844cb473f0f2c96f_NeikiAnalytics.exe
Size

112KB
MD5

aa312f9fd61bee03eb436058fa67e1e0
SHA1

874e34a492a7d51f243161ecfec64740f15ba8e9
SHA256

657b38962e922a20aa5a092f559c76c9c8b597f413f3acec844cb473f0f2c96f
SHA512

fff5794715444c28564d1d075c103ff80fac4dce17fe315d7bb3411f076154ec6eccc78f250f197be7c1e5e936b3f68d194de483faf6fd73725991a3159f3d31
SSDEEP

1536:Uj4vW2w/5XmnSYmQysKbqwxvExsFFXUrbL/RwlM/9BT+0pvFGOj+d:Aj2w/5XmnSx5sKb35XUrbNR/LJZFGO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
657b38962e922a20aa5a092f559c76c9c8b597f413f3acec844cb473f0f2c96f_NeikiAnalytics.exe

Files

657b38962e922a20aa5a092f559c76c9c8b597f413f3acec844cb473f0f2c96f_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

065cb96c08584330d210f61c7c1ce023

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

memmove
RtlUnwind
wcstol
wcstombs

user32

PeekMessageW
BeginPaint
IsIconic
EndPaint
DestroyIcon
DefMDIChildProcW
ClientToScreen
GetClassInfoW
RegisterClassW
PtInRect
IsZoomed
GetCursorPos
GetSysColorBrush
GetDesktopWindow
GetKeyState
DestroyWindow
TrackPopupMenu
IsRectEmpty
GetWindow
GetClassNameW
LoadIconW
DestroyMenu
AppendMenuW
CreatePopupMenu
CheckMenuItem
CreateWindowExW
RegisterClipboardFormatW
CloseClipboard
DrawIcon
GetDlgItemTextW
InflateRect
SetClipboardData
CallWindowProcW
wsprintfA
wvsprintfA
SetActiveWindow
SetWindowTextW
GetParent
IsWindowUnicode
SetRect
PostMessageW
wvsprintfW
MessageBoxW
GetPropW
KillTimer
SendDlgItemMessageW
SetTimer
RemovePropW
FillRect
SetRectEmpty
DrawTextW
OffsetRect
CharNextW
CharPrevW
CharLowerW
CharUpperBuffW
SetPropW
SystemParametersInfoW
WindowFromDC
GetActiveWindow
GetSystemMetrics
DialogBoxParamW
InvalidateRect
SetDlgItemInt
SetScrollPos
EnableWindow
IsDlgButtonChecked
EndDialog
ShowWindow
SetScrollRange
SetWindowLongW
SetWindowTextA
CharUpperBuffA
MoveWindow
CheckDlgButton
DefWindowProcW
UpdateWindow
SendMessageW
LoadCursorW
SetCursor
GetDlgItemInt
GetClientRect
OpenClipboard
EmptyClipboard
GetSysColor
SetWindowPos
GetDC
GetMenu
LoadStringW
GetWindowLongW
CharLowerBuffA
GetScrollPos
SetDlgItemTextW
GetDlgItem
GetWindowRect
ScreenToClient
CharLowerA
wsprintfW
AdjustWindowRect
ReleaseDC

kernel32

GlobalUnlock
GetModuleHandleW
FreeLibrary
GlobalLock
GetFullPathNameW
GetProfileStringW
LoadLibraryW
IsBadHugeWritePtr
IsBadReadPtr
GetPrivateProfileStringW
IsBadWritePtr
LoadLibraryA
LocalFree
LocalAlloc
GetModuleHandleA
MulDiv
GlobalReAlloc
GetCurrentThreadId
lstrcpynW
IsBadCodePtr
GetModuleFileNameW
OutputDebugStringA
DebugBreak
EnterCriticalSection
GlobalAlloc
GetProcAddress
LeaveCriticalSection
lstrlenA
lstrcmpiW
WritePrivateProfileStringW
DisableThreadLibraryCalls
AddAtomA
lstrcatA
lstrcpyA
FindAtomA
AddAtomW
lstrcatW
lstrcpyW
FindAtomW
lstrlenW
MultiByteToWideChar
GetACP
WideCharToMultiByte
DeleteAtom
GlobalFree
GlobalHandle
DeleteCriticalSection
InitializeCriticalSection

gdi32

SetDIBits
SaveDC
RestoreDC
SetTextColor
CreateMetaFileW
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateFontW
GetTextExtentPointW
ExcludeClipRect
CreatePatternBrush
CreateDIBitmap
CreateFontIndirectW
CreateSolidBrush
GetDIBits
GetDeviceCaps
GetNearestColor
GetBitmapBits
PatBlt
GetPixel
SetBkColor
ExtTextOutW
Escape
GetClipBox
SetBitmapBits
StretchBlt
SetDIBitsToDevice
StretchDIBits
GdiFlush
SetStretchBltMode
RealizePalette
GetStockObject
SelectPalette
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBSection
GetSystemPaletteEntries
UnrealizeObject
ResizePalette
SetPaletteEntries
AnimatePalette
SetDIBColorTable
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
CreatePalette
DeleteObject
SelectObject
DeleteDC
LPtoDP
GetDCOrgEx
IntersectClipRect

winmm

mciSendStringW
mciGetErrorStringW
mciSendStringA
mciGetErrorStringA
mciSendCommandW
OpenDriver
GetDriverModuleHandle
CloseDriver

advapi32

CheckTokenMembership
FreeSid
RegCreateKeyA
RegOpenKeyA
RegEnumValueW
RegCreateKeyExW
RegOpenKeyExW
AllocateAndInitializeSid
RegCreateKeyW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegOpenKeyW

shell32

DragFinish
DragQueryFileW
DragAcceptFiles

comctl32

CreateToolbarEx
ord17

Exports

Exports

DrawDibBegin
DrawDibChangePalette
DrawDibClose
DrawDibDraw
DrawDibEnd
DrawDibGetBuffer
DrawDibGetPalette
DrawDibOpen
DrawDibProfileDisplay
DrawDibRealize
DrawDibSetPalette
DrawDibStart
DrawDibStop
DrawDibTime
GetOpenFileNamePreview
GetOpenFileNamePreviewA
GetOpenFileNamePreviewW
GetSaveFileNamePreviewA
GetSaveFileNamePreviewW
ICClose
ICCompress
ICCompressorChoose
ICCompressorFree
ICDecompress
ICDraw
ICDrawBegin
ICGetDisplayFormat
ICGetInfo
ICImageCompress
ICImageDecompress
ICInfo
ICInstall
ICLocate
ICMThunk32
ICOpen
ICOpenFunction
ICRemove
ICSendMessage
ICSeqCompressFrame
ICSeqCompressFrameEnd
ICSeqCompressFrameStart
MCIWndCreate
MCIWndCreateA
MCIWndCreateW
MCIWndRegisterClass
StretchDIB
VideoForWindowsVersion

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

065cb96c08584330d210f61c7c1ce023

Headers

File Characteristics

Imports

ntdll

user32

kernel32

gdi32

winmm

advapi32

shell32

comctl32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 69KB

.data Size: 28KB - Virtual size: 31KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 69KB - Virtual size: 69KB

.data
Size: 28KB - Virtual size: 31KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 4KB