029e5d56577b5c94f3e29030086160c56d3a26a7bd243fa0c9a751a9d8e5dad2_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

029e5d56577b5c94f3e29030086160c56d3a26a7bd243fa0c9a751a9d8e5dad2_NeikiAnalytics.exe
Size

776KB
MD5

378305b228bedb4717c0ccabbe1cd840
SHA1

e3b34e470c24cf1485fae55f8bff784486a760fb
SHA256

029e5d56577b5c94f3e29030086160c56d3a26a7bd243fa0c9a751a9d8e5dad2
SHA512

c2da25b95efa0001721e5f3cea470ad1ee6de8e5d70a269ddedb441a896180549e2fafb309e82ebde378398723063b22708b228ec3b997d5bbb95fd031206953
SSDEEP

12288:U66p+DcrVOxeKGcbr6K3hTsp51ijUuP3pL2iOjEew9+oFc:U66p+DcrVOxTTspsUGL2NZoq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
029e5d56577b5c94f3e29030086160c56d3a26a7bd243fa0c9a751a9d8e5dad2_NeikiAnalytics.exe

Files

029e5d56577b5c94f3e29030086160c56d3a26a7bd243fa0c9a751a9d8e5dad2_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f4a84a387e43bbcfadfd7d1384c63b93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
SystemTimeToFileTime
LocalFileTimeToFileTime
SetErrorMode
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
VirtualAlloc
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetShortPathNameA
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitThread
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetACP
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DeleteFileA
MoveFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
SuspendThread
ResumeThread
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
FormatMessageA
SetLastError
CreateProcessA
CreateWaitableTimerA
SetWaitableTimer
GetCurrentThread
SetThreadPriority
WaitForMultipleObjects
CancelWaitableTimer
SetEvent
DeviceIoControl
WaitForSingleObject
CancelIo
LoadLibraryA
FormatMessageW
LocalFree
CreateEventA
CreateFileA
SetupComm
SetCommTimeouts
GetCommState
SetCommState
CreateThread
DeleteCriticalSection
WaitCommEvent
ReadFile
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetOverlappedResult
ClearCommError
EscapeCommFunction
PurgeComm
SetCommMask
Sleep
TerminateThread
CloseHandle
InitializeCriticalSection
GetUserDefaultLangID
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
FindResourceExA
GetVersionExA
GetModuleHandleA
GetProcAddress
SetThreadLocale
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetSystemTimeAsFileTime
CreateFileW

user32

PostThreadMessageA
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
DestroyIcon
GetMenuItemInfoA
GetSysColorBrush
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
LoadCursorA
DestroyCursor
WindowFromPoint
InflateRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
FillRect
SetRect
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorA
SetRectEmpty
IsZoomed
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
AppendMenuA
InsertMenuA
RemoveMenu
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
EnableMenuItem
CheckMenuItem
LoadIconA
SendDlgItemMessageA
CreateMenu
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
UpdateWindow
EnableWindow
SetActiveWindow
GetActiveWindow
IsWindowEnabled
GetDesktopWindow
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetParent
GetNextDlgTabItem
EndDialog
CopyAcceleratorTableA
SetCapture
SetWindowRgn
DrawIcon
FindWindowA
KillTimer
WinHelpA
UnregisterClassA
CharUpperA
PtInRect
GetWindowRect
GetClientRect
SetTimer
OpenClipboard
SendMessageA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
MessageBoxA
RegisterWindowMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
PostMessageA
PeekMessageA
GetMenuStringA
ModifyMenuA
GetMenu
InvalidateRect
SendMessageW
SetWindowLongA
GetWindowLongA
GetMessageA

gdi32

LineTo
MoveToEx
SetTextAlign
DeleteObject
SelectClipRgn
CreateRectRgn
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
GetCurrentPositionEx
CreatePatternBrush
CreatePen
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
GetViewportOrgEx
GetCharWidthA
StretchDIBits
CreateEllipticRgn
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
IntersectClipRect
ExcludeClipRect
SetMapMode
GetViewportExtEx
GetMapMode
GetTextColor
GetBkColor
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreateFontA
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetTextExtentPoint32A
GetTextMetricsA
SelectObject
CreateDCA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SetPixelV
SetWindowExtEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetPixel
BitBlt
Rectangle
Ellipse
LPtoDP
DPtoLP
GetWindowExtEx
SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueA
RegCloseKey
RegCreateKeyA

shell32

ExtractIconA
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHGetPathFromIDListA

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleTranslateAccelerator
CoTaskMemFree
IsAccelerator

oleaut32

SystemTimeToVariantTime
VarUdateFromDate
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantTimeToSystemTime

ws2_32

closesocket
socket
sendto
htons
inet_addr
recvfrom
htonl
bind
select
WSAStartup

Exports

Exports

hid_close
hid_enumerate
hid_error
hid_free_enumeration
hid_get_feature_report
hid_get_indexed_string
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_open
hid_open_path
hid_read
hid_send_feature_report
hid_set_nonblocking
hid_write

Sections

.text
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4a84a387e43bbcfadfd7d1384c63b93

Headers

File Characteristics

Imports

setupapi

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 480KB - Virtual size: 476KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 140KB - Virtual size: 139KB

.text
Size: 480KB - Virtual size: 476KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 140KB - Virtual size: 139KB