a22a95650b6c436e2973312d2dcf8397ae27735d688e0d0b6e01553f71a18386_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a22a95650b6c436e2973312d2dcf8397ae27735d688e0d0b6e01553f71a18386_NeikiAnalytics.exe
Size

548KB
MD5

94977d058b120406971de6abcbab05c0
SHA1

37a3dd723a44ce83d1580953007662c129b489c6
SHA256

a22a95650b6c436e2973312d2dcf8397ae27735d688e0d0b6e01553f71a18386
SHA512

5cb95d4d7b2d14b604b2a51793d2577ed6a7ef04d384932ed165e6d7ac9e81bf4d4def336f2a8fe5a4b73dc7b18b8c546cdc475e1e3ad014041b8f44d5bccc45
SSDEEP

6144:Dvii3EIGNsUtXJ7enheiAs3X8A8tgB1+a1qFhza:Dx3EZNsO+8TtgB13qhza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a22a95650b6c436e2973312d2dcf8397ae27735d688e0d0b6e01553f71a18386_NeikiAnalytics.exe

Files

a22a95650b6c436e2973312d2dcf8397ae27735d688e0d0b6e01553f71a18386_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

67f2cca8d35bf7337b7c492ef65ddb2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cimit

cadsys
err_sethErr
IsCimAlreadyRun
gui_sethwnd
GetSetMagellanHandle
get_title
prgvpc
prgblc
refrsh
ProcMagellanMessage
ProcKbdMagellanMessage
RectRefresh
set_guique
win_iconify
registry_get
WasInit
SetCurExst
GetMercuryAutomaticTest
initque
SetActive
ShowSplashScreen
LoadHebrewBitmaps
CimatronWndClassName
FreeDriverDll
gui_iswin95
get_console_title
registry_set
GetDatDir

msvcrt

_strlwr
strstr
sscanf
sprintf
strrchr
srand
time
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

kernel32

AllocConsole
TerminateProcess
LoadLibraryA
CreateProcessA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
FreeConsole
GetCurrentProcess
GetLastError
Sleep
GetProcAddress
FreeLibrary
GetStdHandle
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA

advapi32

RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey

user32

FindWindowA
SetClassLongA
SetTimer
SystemParametersInfoA
PtInRect
ClipCursor
KillTimer
ReleaseCapture
SetCursor
PostMessageA
RegisterWindowMessageA
PostQuitMessage
GetDC
ClientToScreen
SetRect
GetClientRect
DefWindowProcA
PeekMessageA
GetUpdateRect
ShowWindow
LoadCursorA
CreateWindowExA
MessageBoxA
GetMessageA
RegisterClassA
GetWindowRect
IsIconic
SetWindowPos
SetCapture
DispatchMessageA
GetDesktopWindow
LoadIconA
SendMessageA
TranslateMessage

gdi32

GetTextMetricsA
GetDeviceCaps
GetStockObject

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT_HA
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 64B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67f2cca8d35bf7337b7c492ef65ddb2d

Headers

File Characteristics

Imports

cimit

msvcrt

kernel32

advapi32

user32

gdi32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

_TEXT_HA Size: 68KB - Virtual size: 66KB

.rsrc Size: 372KB - Virtual size: 368KB

.hdata Size: 64B - Virtual size: 4KB

.htext Size: 72KB - Virtual size: 72KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

_TEXT_HA
Size: 68KB - Virtual size: 66KB

.rsrc
Size: 372KB - Virtual size: 368KB

.hdata
Size: 64B - Virtual size: 4KB

.htext
Size: 72KB - Virtual size: 72KB