9e95bdbc6a6a150a8e9aea72df82ff0b3e5c7f026a660911c3b3f3afb6eb4fe2_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9e95bdbc6a6a150a8e9aea72df82ff0b3e5c7f026a660911c3b3f3afb6eb4fe2_NeikiAnalytics.exe
Size

2.4MB
MD5

e694d708d5ae5718dc039e0f45194a50
SHA1

916f4964d7d3e90b6bd3b4d44a323e3883a60af1
SHA256

9e95bdbc6a6a150a8e9aea72df82ff0b3e5c7f026a660911c3b3f3afb6eb4fe2
SHA512

7330a39ae578acf7f67c9b0fe5a4dc686e844af3071bccf70377dae0e062a8b1706731c38b5a101d87752c422dcf35ce83aceb4265eb93728050417c46a43d9e
SSDEEP

49152:fcd1dEwZq8FOZHGXOFc89iJqTz6Goz+QL41z6HIf0H0iTZxGq94o40:UHiW7FOZHGXyc89igz6GozDeOHIf0H0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e95bdbc6a6a150a8e9aea72df82ff0b3e5c7f026a660911c3b3f3afb6eb4fe2_NeikiAnalytics.exe

Files

9e95bdbc6a6a150a8e9aea72df82ff0b3e5c7f026a660911c3b3f3afb6eb4fe2_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

b852044de56f82acd07232973f698cda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
QueryPerformanceCounter
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
SetEnvironmentVariableA
VirtualAlloc
GetSystemInfo
GetStartupInfoW
GetProcessHeap
VirtualQuery
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
HeapAlloc
ExitThread
LockResource
CreateThread
HeapReAlloc
GetSystemTimeAsFileTime
AreFileApisANSI
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
HeapFree
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetTickCount
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
GlobalFlags
FileTimeToLocalFileTime
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
FileTimeToSystemTime
GetThreadLocale
InterlockedIncrement
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
SuspendThread
SetThreadPriority
GlobalGetAtomNameW
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
GetSystemDirectoryW
GetVersion
DecodePointer
EncodePointer
OutputDebugStringA
GetFileAttributesW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CopyFileW
LocalFree
GlobalSize
SetLastError
GetVersionExW
GetProcAddress
InterlockedDecrement
lstrcpynW
lstrlenW
InitializeCriticalSectionAndSpinCount
CreateEventW
MulDiv
ResetEvent
SetEvent
ResumeThread
FreeResource
FormatMessageW
GetFileAttributesA
GetTempFileNameW
GetTempPathW
ExpandEnvironmentStringsW
GetModuleHandleW
GetLocaleInfoW
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateDirectoryW
LoadLibraryW
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
InterlockedExchangeAdd
InterlockedExchange
CreateFileW
GetModuleFileNameW
CreateMutexW
GetSystemTime
CloseHandle
Sleep
GetCurrentThreadId
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LoadResource
GetLastError
GetConsoleMode

user32

MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetMenuDefaultItem
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
DrawFocusRect
PostThreadMessageW
LockWindowUpdate
WindowFromPoint
RegisterClipboardFormatW
KillTimer
SetTimer
SetParent
UnionRect
MapVirtualKeyW
GetKeyNameTextW
CopyImage
RealChildWindowFromPoint
UnregisterClassW
GetSysColorBrush
CharUpperW
EndDialog
CreateDialogIndirectParamW
CharNextW
SendDlgItemMessageA
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
MapDialogRect
SetWindowContextHelpId
IsRectEmpty
InvalidateRgn
CopyAcceleratorTableW
SetCapture
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageW
ReuseDDElParam
UnpackDDElParam
LoadImageW
GetWindowThreadProcessId
GetDesktopWindow
ToUnicodeEx
IntersectRect
SetRectEmpty
SetCursor
InsertMenuItemW
DestroyMenu
CreatePopupMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
ReleaseCapture
BringWindowToTop
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongW
GetWindowLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SendMessageW
ShowWindow
MoveWindow
IsIconic
SetFocus
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
SetCursorPos
GetWindowRgn
DestroyCursor
CreateMenu
SetClassLongW
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
OffsetRect
GetDoubleClickTime
GetActiveWindow
EnableWindow
GetSystemMetrics
GetSystemMenu
EnableMenuItem
AppendMenuW
DeleteMenu
DrawIcon
UpdateWindow
SetForegroundWindow
GetClientRect
GetWindowRect
GetSysColor
SetWindowLongW
EnumChildWindows
GetClassNameW
LoadIconW
MessageBoxW
GetDC
ReleaseDC
InvalidateRect
FillRect
SetRect
CopyRect
RegisterWindowMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
LoadCursorW
DestroyIcon
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
UnhookWindowsHookEx
GetFocus
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetParent
LoadBitmapW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
PostMessageW

gdi32

SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetBkColor
GetTextColor
CombineRgn
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
SetViewportOrgEx
Rectangle
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
SetROP2
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
Polyline
CreateSolidBrush
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
GetRgnBox
CreateRectRgnIndirect
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
CreateDCW
CopyMetaFileW
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetTextExtentPoint32W
SetTextAlign

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetDesktopFolder
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
Shell_NotifyIconW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAppBarMessage
SHBrowseForFolderW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

DrawThemeParentBackground
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

CoCreateGuid
CoGetClassObject
StgCreateDocfileOnILockBytes
OleLockRunning
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal

oleaut32

VariantInit
VariantClear
VariantCopy
VariantChangeType
SysAllocStringLen
OleLoadPicture
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
OleCreateFontIndirect
SysAllocStringByteLen
VarBstrFromDate
SysStringByteLen
SysFreeString
SysAllocString

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

dbghelp

MiniDumpWriteDump

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

InternetCloseHandle
InternetCrackUrlW
InternetCanonicalizeUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetOpenW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 406KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b852044de56f82acd07232973f698cda

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

dbghelp

oleacc

wininet

gdiplus

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 406KB - Virtual size: 405KB

.data Size: 29KB - Virtual size: 60KB

.rsrc Size: 251KB - Virtual size: 251KB

.reloc Size: 197KB - Virtual size: 197KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 406KB - Virtual size: 405KB

.data
Size: 29KB - Virtual size: 60KB

.rsrc
Size: 251KB - Virtual size: 251KB

.reloc
Size: 197KB - Virtual size: 197KB