8d351d1183420b6f04b52fed63939a4d2888db1666f19f09a20760f40184c15c_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8d351d1183420b6f04b52fed63939a4d2888db1666f19f09a20760f40184c15c_NeikiAnalytics.exe
Size

1.0MB
MD5

10021d1859b8f3b5f3a0296cf4441c70
SHA1

94bf7d089658662d56a6e49d05a8d38a79842de0
SHA256

8d351d1183420b6f04b52fed63939a4d2888db1666f19f09a20760f40184c15c
SHA512

b6d69425863487a29104841096079b08fe1e8c4473bc8b2d49669b44a9e5683092b4a55578a6365dc4af8337cf4fb13979083af6394eed232e5667edad98546e
SSDEEP

12288:6lMq0E4HbGzoZ+4Hw1CkOQatGEQnRrzhJvHmQwAHe7bn9kR36TF6N1:eMqp4HbGzGHdQh6d9apN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d351d1183420b6f04b52fed63939a4d2888db1666f19f09a20760f40184c15c_NeikiAnalytics.exe

Files

8d351d1183420b6f04b52fed63939a4d2888db1666f19f09a20760f40184c15c_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

30bed2a306611beea71058a3f5b26f2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AllocConsole
Beep
CloseHandle
CompareFileTime
CreateDirectoryA
CreateFileA
CreateMutexA
CreatePipe
CreateProcessA
DeleteFileA
DuplicateHandle
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FormatMessageA
FreeConsole
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetProfileIntA
GetProfileStringA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnfix
GlobalUnlock
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
LoadResource
LocalFree
LockFile
LockFileEx
LockResource
MoveFileA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleInputA
ReadConsoleOutputA
ReadFile
ReleaseMutex
RemoveDirectoryA
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetConsoleWindowInfo
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFilePointer
SetHandleCount
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
UnlockFileEx
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleOutputA
WriteFile
WritePrivateProfileStringA
WriteProfileStringA
_hread
_hwrite
_lclose
_lcreat
_llseek
_lopen
_lread
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
GlobalCompact

winspool.drv

ClosePrinter
EndDocPrinter
EndPagePrinter
EnumPrintersA
GetPrinterA
OpenPrinterA
StartDocPrinterA
StartPagePrinter
WritePrinter

comdlg32

ChooseColorA
ChooseFontA
CommDlgExtendedError
FindTextA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA

gdi32

AddFontResourceA
Arc
BitBlt
Chord
CloseMetaFile
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBitmap
CreateFontA
CreateHatchBrush
CreateMetaFileA
CreatePalette
CreatePatternBrush
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesA
EnumFontsA
Escape
ExtFloodFill
ExtTextOutA
FloodFill
FrameRgn
GetBkColor
GetDIBits
GetDeviceCaps
GetMapMode
GetMetaFileA
GetObjectA
GetObjectType
GetPixel
GetStockObject
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetTextExtentPointA
GetTextFaceA
GetTextMetricsA
GetViewportOrgEx
GetWindowOrgEx
LineTo
MoveToEx
PatBlt
Pie
PlayMetaFile
PolyPolygon
RealizePalette
Rectangle
RemoveFontResourceA
ResetDCA
RestoreDC
RoundRect
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBitsToDevice
SetMapMode
SetMetaFileBitsEx
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocA
StartPage
StretchBlt
StretchDIBits
TextOutA
UnrealizeObject

shell32

DragAcceptFiles
DragQueryFileA
DragQueryPoint
ExtractIconA
ShellAboutA

user32

AppendMenuA
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
CharToOemA
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CloseWindow
CreateAcceleratorTableA
CreateCaret
CreateCursor
CreateDialogIndirectParamA
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DestroyAcceleratorTable
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawFocusRect
DrawIcon
DrawMenuBar
DrawStateA
DrawTextA
DrawTextExA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EnumThreadWindows
ExitWindowsEx
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetCaretPos
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
GetFocus
GetKeyState
GetKeyboardState
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetNextDlgTabItem
GetParent
GetPropA
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
GetWindowWord
HideCaret
HiliteMenuItem
InsertMenuA
InvalidateRect
InvertRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
LoadMenuA
LoadStringA
MapDialogRect
MapVirtualKeyA
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OemToCharA
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClassWord
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenu
SetParent
SetPropA
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowWord
SetWindowsHookExA
ShowCaret
ShowCursor
ShowWindow
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
WaitMessage
WinHelpA
WindowFromPoint
keybd_event
wsprintfA
GetSystemMenu

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleInitialize
OleUninitialize

oleaut32

GetActiveObject
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPutElement
SysAllocString
SysFreeString
SysStringLen
VarR8FromCy
VarR8FromDec
VariantClear
VariantInit

Exports

Exports

_WndFrameProc
__DbgWndProc
__GetExceptDLLinfo
__WndProc
___CPPdebugHook

Sections

.text
Size: 566KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 419KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30bed2a306611beea71058a3f5b26f2c

Headers

File Characteristics

Imports

kernel32

winspool.drv

comdlg32

gdi32

shell32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 566KB - Virtual size: 568KB

.data Size: 419KB - Virtual size: 468KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 11KB - Virtual size: 12KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 49KB - Virtual size: 52KB

.text
Size: 566KB - Virtual size: 568KB

.data
Size: 419KB - Virtual size: 468KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 11KB - Virtual size: 12KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 49KB - Virtual size: 52KB