960640a508d893d5ab4f8b376ba2038c255c3e1194baf71dede38d0ddc0db0ff_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

960640a508d893d5ab4f8b376ba2038c255c3e1194baf71dede38d0ddc0db0ff_NeikiAnalytics.exe
Size

396KB
MD5

7f9ea8942062117645de18fbf298f0f0
SHA1

70c0b51a3196cba13fc5421b64340a0f47c61d53
SHA256

960640a508d893d5ab4f8b376ba2038c255c3e1194baf71dede38d0ddc0db0ff
SHA512

c0052f714abc7e9f39525a83373a89efba26791d8872ef0ea30c828033c4ccabbb58dd980a3512ab1ddf0b97a7f558001e5e61f186f4de90916e312242d79349
SSDEEP

6144:NqYgmkBP1Qj5p5ElR0YzCrFxaGkacckP0nYFkoQ5GSTQQIQIQ0JeU9QWo1:NzDoCj5pClR0YzkzazBcs0YFkRa9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960640a508d893d5ab4f8b376ba2038c255c3e1194baf71dede38d0ddc0db0ff_NeikiAnalytics.exe

Files

960640a508d893d5ab4f8b376ba2038c255c3e1194baf71dede38d0ddc0db0ff_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7bc4ea0249dce0f55c6d05a8802b7de5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumEntriesA

kernel32

VirtualAlloc
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadWritePtr
LCMapStringA
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualFree
GetFileType
HeapCreate
HeapDestroy
HeapSize
SetStdHandle
HeapReAlloc
GetSystemTime
GetACP
GetLocalTime
CreateThread
GetTimeZoneInformation
TerminateProcess
GetCommandLineA
RaiseException
ExitProcess
RtlUnwind
GetStartupInfoA
HeapAlloc
HeapFree
SetErrorMode
SizeofResource
IsBadReadPtr
InterlockedDecrement
InterlockedIncrement
GetTickCount
ExitThread
LocalAlloc
LocalFree
GlobalSize
GlobalFree
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
SuspendThread
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetModuleFileNameA
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
GetVersionExA
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetProfileStringA
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentThread
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FindFirstFileA
GetLastError
FindClose
lstrcmpA
CreateEventA
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
FormatMessageA
MulDiv
GetModuleHandleA
SetLastError
WideCharToMultiByte

user32

CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetDCEx
RegisterClipboardFormatA
SetParent
PostQuitMessage
WindowFromPoint
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
CharUpperA
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetRectEmpty
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
GetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
RegisterClassA
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
CallWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowPos
SetWindowContextHelpId
MapDialogRect
GetWindowPlacement
GetWindowRect
InflateRect
IntersectRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
RedrawWindow
UpdateWindow
DrawFocusRect
LockWindowUpdate
GetDlgItem
wsprintfA
GetClipboardData
RemovePropA
CheckMenuItem
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
IsMenu
EnableMenuItem
SetActiveWindow
KillTimer
IsIconic
DrawIcon
SetPropA
GetSystemMenu
SetTimer
PostThreadMessageA
LoadIconA
EnumWindows
ShowWindow
SetForegroundWindow
GetPropA
GetClassNameA
LoadStringA
WinHelpA
GetClassInfoA
OffsetRect
GetParent
GetFocus
GetCursorPos
ScreenToClient
InvalidateRect
LoadCursorA
CopyIcon
IsWindow
SetWindowLongA
SetCursor
GetClientRect
PtInRect
ReleaseCapture
SetCapture
DestroyCursor
EnableWindow
SendMessageA
GetSubMenu
GrayStringA
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
InsertMenuA
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
RegisterWindowMessageA
GetWindowTextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

CreateSolidBrush
CreateCompatibleBitmap
GetTextExtentPoint32W
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetBkMode
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
CreateBitmap
SetRectRgn
CombineRgn
DPtoLP
StretchDIBits
GetCharWidthA
CreateFontA
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
SetBkMode
SetBkColor
SaveDC
RestoreDC
CreateRectRgn
GetTextMetricsA
CreateRectRgnIndirect
Escape
ExtTextOutA
CreateCompatibleDC
PatBlt
RectVisible
PtVisible
TextOutA
GetPixel
SetPixel
GetObjectA
SelectObject
DeleteObject
CreateDIBSection
Ellipse
GetTextExtentPoint32A
DeleteDC
CreatePen
CreateFontIndirectA
GetDeviceCaps
GetStockObject
BitBlt

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA

shell32

ShellExecuteA
Shell_NotifyIconA

comctl32

ImageList_GetImageCount
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
ImageList_Create
ord17

oledlg

ord8

ole32

CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
VariantCopy
VariantChangeType

wsock32

WSAStartup
WSACleanup

wininet

InternetGetLastResponseInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetOptionExA
InternetCloseHandle
InternetQueryOptionA
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetSetOptionA
InternetSetStatusCallback

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7bc4ea0249dce0f55c6d05a8802b7de5

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

Sections

.text Size: 308KB - Virtual size: 307KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 16KB - Virtual size: 33KB

.text
Size: 308KB - Virtual size: 307KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 16KB - Virtual size: 33KB