a312741af7f7e0a03077f3204bcd6ba0156ecdd427d4ea749545291c5206bbff_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a312741af7f7e0a03077f3204bcd6ba0156ecdd427d4ea749545291c5206bbff_NeikiAnalytics.exe
Size

1.7MB
MD5

267efaa0bb430e9980d89e35df04b020
SHA1

865ea468250bfbf8bbdc0f9949c596d8a5a6b1ce
SHA256

a312741af7f7e0a03077f3204bcd6ba0156ecdd427d4ea749545291c5206bbff
SHA512

e3314690dc9c953bd3e9769cc50fc5ffb5957bc9e5b9a035807442f3a2d58d10c2c58c069ac752050c5811a00f0c928b4153f88c371a674a48aed1dec3fc1847
SSDEEP

24576:BnfZoB8N2wyBAtcwVzqNhFsrEKiVmc5NRhZVRtyLhS3YIDaCF0uENO:BBw8QwNqN/CEKiVD5naS3YMDENO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a312741af7f7e0a03077f3204bcd6ba0156ecdd427d4ea749545291c5206bbff_NeikiAnalytics.exe

Files

a312741af7f7e0a03077f3204bcd6ba0156ecdd427d4ea749545291c5206bbff_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

78a3903a67010f7f9e80137510d5dc1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_BeginDrag
ImageList_Destroy
ord6
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ord16
ord17
ImageList_Add
ImageList_EndDrag
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove

dentalsimapi

dsSendXML
dsSaveVideo

kernel32

GetACP
GetUserDefaultLCID
GetLocaleInfoA
GetTimeZoneInformation
GetStdHandle
ExpandEnvironmentStringsA
GetTickCount
GetThreadLocale
IsProcessorFeaturePresent
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
MulDiv
FindClose
FindFirstFileA
CopyFileA
MultiByteToWideChar
GetLastError
FindNextFileA
QueryPerformanceCounter
GetCurrentProcess
GetVersionExA
GetCurrentProcessId
SetThreadPriority
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree
FormatMessageA
GetEnvironmentVariableA
CloseHandle
TerminateThread
GetExitCodeThread
GetCurrentThreadId
ResumeThread
CreateThread
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
GetExitCodeProcess
SetLastError
GetCommandLineA
SetErrorMode
WideCharToMultiByte
LocalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
CreateFileA
GetTempPathA
GetTempFileNameA
GetFileType
GetFileAttributesA
SetCurrentDirectoryA
GetWindowsDirectoryA
CreateMutexA
ReleaseMutex
InterlockedIncrement
InterlockedDecrement
TlsFree
TlsSetValue
TlsAlloc
ExitProcess
ReadFile
WriteFile
CreatePipe
PeekNamedPipe
SetNamedPipeHandleState
GetModuleHandleA
IsValidCodePage
GetCPInfo
DuplicateHandle
WaitForSingleObject
CreateProcessA
GetSystemTimeAsFileTime

user32

DdeGetData
ShowCursor
PostThreadMessageA
MsgWaitForMultipleObjects
WaitForInputIdle
MessageBeep
DdeFreeStringHandle
DdeQueryStringA
DdeUninitialize
DdeCreateDataHandle
DdeGetLastError
DdeInitializeA
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeNameService
SetActiveWindow
DdeConnect
GetDesktopWindow
GetForegroundWindow
SetForegroundWindow
IsWindow
DdePostAdvise
DdeFreeDataHandle
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetMenuStringA
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
SetClipboardData
RegisterClipboardFormatA
DrawStateA
DrawEdge
GetMessagePos
UnionRect
ValidateRect
GetMessageA
MapWindowPoints
DestroyCursor
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyAcceleratorTable
GetWindowDC
GetWindowTextA
GetClassNameA
DrawIconEx
DrawFrameControl
InsertMenuItemA
GetSubMenu
CreateMenu
AppendMenuA
InsertMenuA
RemoveMenu
DestroyMenu
CreatePopupMenu
SetMenuItemInfoA
ModifyMenuA
CheckMenuRadioItem
CheckMenuItem
GetMenuState
GetWindowTextLengthA
HideCaret
keybd_event
CreateIconIndirect
LoadImageA
DestroyIcon
GetIconInfo
LoadBitmapA
LoadIconA
LoadCursorA
MessageBoxA
KillTimer
SetTimer
GetUpdateRect
BeginPaint
DrawIcon
EndPaint
SetMenu
PostMessageA
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
ChildWindowFromPoint
OffsetRect
DrawFocusRect
CopyRect
DrawTextA
GetDlgItem
CreateDialogParamA
CreateDialogIndirectParamA
RegisterClassA
UnregisterClassA
FlashWindow
SetWindowRgn
GetMenu
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
IsIconic
IsZoomed
BringWindowToTop
InflateRect
GetUpdateRgn
GetSysColor
CreateWindowExA
IsDialogMessageA
TrackPopupMenu
PtInRect
GetCapture
DestroyWindow
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetActiveWindow
GetMenuItemCount
GetMenuItemInfoA
SystemParametersInfoA
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
SetWindowTextA
GetFocus
IsWindowEnabled
IsWindowVisible
CallWindowProcA
DefWindowProcA
DeferWindowPos
MoveWindow
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
GetParent
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
ReleaseCapture
SetCapture
ShowWindow
EnableWindow
SetFocus
SetWindowPos
SetWindowLongA
GetWindowLongA
FillRect
GetClientRect
GetWindowRect
GetKeyState
GetSystemMetrics
GetAsyncKeyState
VkKeyScanA
GetDC
ReleaseDC
PeekMessageA
DispatchMessageA
TranslateMessage
PostQuitMessage
SendMessageA
SetCursor
InvalidateRect

gdi32

StretchDIBits
LineTo
MoveToEx
RestoreDC
SaveDC
StretchBlt
EqualRgn
PtInRegion
CreateDIBSection
MaskBlt
GetRgnBox
SetBrushOrgEx
Ellipse
RoundRect
Rectangle
PolyPolygon
SetPolyFillMode
Polygon
Pie
Arc
GetTextColor
GetBkColor
SetMapMode
SetViewportExtEx
GetDIBits
SetViewportOrgEx
SetWindowOrgEx
GetTextExtentExPointA
GetCharABCWidthsA
SetROP2
TextOutA
PolyBezier
Polyline
SetPixel
GetPixel
ExtFloodFill
ExtSelectClipRgn
GetClipBox
SetStretchBltMode
CreatePalette
GetNearestPaletteIndex
PatBlt
CreatePatternBrush
CreateHatchBrush
SetTextAlign
RectInRegion
CreateRectRgnIndirect
CombineRgn
SelectClipRgn
CreateBitmap
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
GetPaletteEntries
GetObjectA
GetStockObject
ExtCreatePen
CreateSolidBrush
CreatePen
CreateICA
DeleteDC
SetBkMode
SetTextColor
SetBkColor
GetDeviceCaps
DeleteObject
CreateFontIndirectA
GetRegionData
ExtCreateRegion
OffsetRgn
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32A
RealizePalette
GdiFlush
SelectObject
GetTextMetricsA
CreateDIBitmap
GetDIBColorTable
SetAbortProc
EndDoc
StartPage
EndPage
CreateDCA
StartDocA
EnumFontFamiliesExA
GetEnhMetaFileA
CopyEnhMetaFileA
DeleteEnhMetaFile
GetSystemPaletteEntries
SetWindowExtEx
SelectPalette

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

ChooseColorA
ChooseFontA
PrintDlgA
PageSetupDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ExtractIconExA
ExtractIconA
DragQueryFileA
DragQueryPoint
DragFinish
DragAcceptFiles

ole32

OleIsCurrentClipboard
OleSetClipboard
OleLockRunning
OleRun
OleSetContainedObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleInitialize
OleUninitialize
CoCreateInstance
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard

oleaut32

VariantTimeToSystemTime
DosDateTimeToVariantTime
SafeArrayCreate
SysStringLen
SysAllocString
SysFreeString
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData

hapticapi2

haDataLoggerClose
haDataLoggerRemoveAllParameters
haDataLoggerAddParameter
haDataLoggerConfigure
haDataLoggerAllocMatrix
haDataLoggerFreeMatrix
haDataLoggerFlushMatrix
haDataLoggerStart
haDataLoggerStop
haDataLoggerOpen

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
??1_Container_base12@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z

msvcr100

__CxxFrameHandler3
??_V@YAXPAX@Z
fopen
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
_purecall
atof
sprintf_s
memset
_wassert
isspace
fprintf
memcpy
fclose
fread
memchr
strchr
tolower
fwrite
sscanf
strtol
_errno
sprintf
toupper
exit
atoi
_localtime64
floor
ceil
_CIexp
_CIlog
_CIsin
_CIcos
_CIsqrt
strncpy
__iob_func
fflush
_snprintf
strncat
vsprintf
_vsnprintf
printf
_time64
feof
remove
_stat32
ferror
isalpha
getenv
_gmtime64
_mktime64
_ftime32
realloc
isdigit
malloc
vfprintf
_get_osfhandle
calloc
strncmp
_strdup
isalnum
_strnicmp
strstr
strftime
mbstowcs
qsort
strtoul
strtod
_vsprintf_p
_open_osfhandle
?_open@@YAHPBDHH@Z
_fdopen
_fileno
_mkdir
_getcwd
rename
_close
_read
_write
_lseeki64
_telli64
_ftime64
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_beginthreadex
_stricmp
setlocale
abort
fputc
fputs
_fseeki64
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_ftelli64
clearerr
bsearch
clock
_CIpow
_CIlog10
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
free
atol

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78a3903a67010f7f9e80137510d5dc1f

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

dentalsimapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

hapticapi2

msvcp100

msvcr100

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 318KB - Virtual size: 318KB

.data Size: 42KB - Virtual size: 124KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 178KB - Virtual size: 177KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 318KB - Virtual size: 318KB

.data
Size: 42KB - Virtual size: 124KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 178KB - Virtual size: 177KB