8bb2af1b5861a271d966f2e62cfe92032bc13f8feeb8146ea9faae7b82b74ae9_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8bb2af1b5861a271d966f2e62cfe92032bc13f8feeb8146ea9faae7b82b74ae9_NeikiAnalytics.exe
Size

318KB
MD5

8c8ed618c09537f807429c629e4ef390
SHA1

ca588d44e9b36d820e6acdb20b738b0d0cde161c
SHA256

8bb2af1b5861a271d966f2e62cfe92032bc13f8feeb8146ea9faae7b82b74ae9
SHA512

a61d6535992f2f55c0c974ab68a8e49f6a82f718313aff72cdb5c26ba4b9b6fb81eaa0d13ac742d604255ea56e53ad6c4b3e444c369f1f09dcf83decf67f6e2d
SSDEEP

6144:cOzWu3FDgn6RIIPOhnOj8mbBJe9VjAaSe8d0M4XrEI7PJ51:c+Wu3Vgn6RIIPOhOj8SLqVjAaSZ4bH7l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb2af1b5861a271d966f2e62cfe92032bc13f8feeb8146ea9faae7b82b74ae9_NeikiAnalytics.exe

Files

8bb2af1b5861a271d966f2e62cfe92032bc13f8feeb8146ea9faae7b82b74ae9_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

3772eae84ec5dc3c8ac1246a0a8bdb60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\BranchAI\win\Release\stubs\x86a\Trialware.pdb

Imports

kernel32

GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc
GetFileSize
ReadFile
GetProcAddress
EnumResourceNamesA
SetEnvironmentVariableA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
SetFilePointer
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
UnhandledExceptionFilter
GetEnvironmentStringsW
HeapFree
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
GetOEMCP
IsBadWritePtr
VirtualFree
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
CloseHandle
WriteFile
DeleteFileA
GetTempFileNameA
GetTempPathA
GetProcessHeap
lstrcpyA
HeapAlloc
FlushInstructionCache
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceExA
GetVersionExA
FlushFileBuffers
DeleteCriticalSection
CompareStringA
GetThreadLocale
lstrcmpiA
GetLastError
InterlockedExchange
RaiseException
MultiByteToWideChar
GetACP
CompareStringW
GetVolumeInformationA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
CreateFileA
GetWindowsDirectoryA
FindResourceA
MulDiv
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
HeapCreate
GetModuleHandleA
WideCharToMultiByte
InitializeCriticalSection
GetLocaleInfoA
lstrlenA
FreeEnvironmentStringsW

user32

SendMessageW
CreateDialogIndirectParamA
DialogBoxIndirectParamA
RemovePropA
SetPropA
EnableWindow
SetTimer
RedrawWindow
OpenClipboard
MapWindowPoints
GetPropA
PostQuitMessage
GetWindow
SystemParametersInfoA
GetWindowRect
PostMessageA
GetClipboardData
IsWindowVisible
CloseClipboard
UnregisterClassA
IsClipboardFormatAvailable
GetWindowDC
ShowWindow
SetForegroundWindow
MessageBoxA
GetSystemMetrics
LoadImageA
EndDialog
IsWindow
DestroyWindow
SendMessageA
BeginPaint
EndPaint
GetParent
GetClientRect
FillRect
IsWindowEnabled
GetSysColor
GetWindowLongA
DrawTextA
GetFocus
DrawFocusRect
InvalidateRect
PtInRect
SetCursor
UpdateWindow
SetFocus
SetCapture
GetCapture
ReleaseCapture
GetCursorPos
ScreenToClient
GetDC
ReleaseDC
OffsetRect
DefWindowProcA
SetWindowLongA
SetRectEmpty
DestroyCursor
GetClassNameA
SetWindowPos
CreateCursor
CreateWindowExA
SetWindowTextA
CharNextA
CallWindowProcA
GetSysColorBrush
GetDlgCtrlID
GetDlgItem
GetWindowTextA
GetWindowTextW
GetWindowTextLengthA
GetWindowTextLengthW
KillTimer

gdi32

DeleteDC
SetTextColor
SelectObject
GetDeviceCaps
GetObjectA
CreateFontIndirectA
GetStockObject
SetBkMode
GetMapMode
SetMapMode
GetViewportExtEx
DeleteObject
GetWindowExtEx

advapi32

CryptDestroyKey
CryptDestroyHash
CryptAcquireContextA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CryptDeriveKey
CryptCreateHash
CryptReleaseContext
CryptVerifySignatureA
CryptImportKey
CryptEncrypt
CryptDecrypt
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
CryptHashData

shell32

ShellExecuteA

ole32

CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime
VarDateFromStr
OleLoadPicture

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
_TrackMouseEvent
PropertySheetA

Exports

Exports

DisplayRegistration
DisplayRegistrationStr
ReadSettings
ReadSettingsStr

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3772eae84ec5dc3c8ac1246a0a8bdb60

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Exports

Exports

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 75KB - Virtual size: 74KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 75KB - Virtual size: 74KB

.reloc
Size: 17KB - Virtual size: 16KB