033d5ecf2c1e2e153d0d3641505d1c319ffacd5e0fe36bfb6f3d91f986871126_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

033d5ecf2c1e2e153d0d3641505d1c319ffacd5e0fe36bfb6f3d91f986871126_NeikiAnalytics.exe
Size

771KB
MD5

75565ac39a3fd3e5b56dfe90f083f370
SHA1

5d7ff94da6fdb66af96582da1f8486a27468dbf3
SHA256

033d5ecf2c1e2e153d0d3641505d1c319ffacd5e0fe36bfb6f3d91f986871126
SHA512

b7fb7ab97446484276ea2be3179f4159750a5745b024ed950c958f35c59a121a8fa2ca591e2660fb4ad81490aa0e44b4898287f7a0efaa205209b61c8570bb0e
SSDEEP

12288:ZOIfut6cgLLpEzVTdVzfVDf5XJVNIpFkYxy3WfT:ZAccgRidV5jUpFTy3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
033d5ecf2c1e2e153d0d3641505d1c319ffacd5e0fe36bfb6f3d91f986871126_NeikiAnalytics.exe

Files

033d5ecf2c1e2e153d0d3641505d1c319ffacd5e0fe36bfb6f3d91f986871126_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

bb6b29a97816e66b1c52e02b5814da41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dllriho

?Infos_Service@@YAGPADPAUPARAMETRE_SERVICE@@@Z
?AlArrivee@@YAIPAXPADJGGPAUPASSAGE_TRAIN@@I@Z
?Tri_Sortie@@YAXPAUPARAMETRE_SORTIE@@E@Z
?Numero_Train@@YAXPAXKPAD11@Z
?Recherche_Horaire@@YAGPAXPAUENTREE_RECHERCHE_HORAIRE@@PAUPARAMETRE_SORTIE@@@Z
?Charge_Horaires@@YAFPADPAPAXPAUPARAMETRE_SERVICE@@0G@Z
?Init_Client@@YAFPAXPAPAX@Z
?Libere_Client@@YAPAXPAX@Z
?Libere_Horaires@@YAPAXPAX@Z
?Train_Tranche@@YAHPAXPADPAKH@Z
?CirculeCeJour@@YAHPAXJKH@Z
?Prestation@@YAKPAXK@Z
?Niveau@@YADPAXKKH@Z
?Riho_putenv@@YAXPAD@Z
?Riho_getenv@@YAPADXZ
?Riho_tzset@@YAHXZ
?Conditions_Emprunt@@YAHPAXPAD11I@Z
?Conditions_CONDTRA@@YAHPADJ0I@Z
?Regime@@YAFPAXKPAEGPAG@Z
?EnPartance@@YAIPAXPADJGGPAUPASSAGE_TRAIN@@I@Z
?Desserte_Tranche2@@YAHPAXKPAULIGNE_DESSERTE@@H@Z

kernel32

Sleep
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceA
MulDiv
WideCharToMultiByte
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GlobalLock
GlobalReAlloc
GetWindowsDirectoryA
WinExec
GetCurrentDirectoryA
CopyFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetDriveTypeA
GetModuleFileNameA
WritePrivateProfileStringA
SetCurrentDirectoryA
MultiByteToWideChar
SetLastError
GetLastError
GlobalAddAtomA
GlobalGetAtomNameA
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
lstrlenA
LocalFree
FormatMessageA
GetVersionExA
lstrcmpW
FreeLibrary
CompareStringA
VirtualAlloc
RaiseException
GetStartupInfoA
GetCommandLineA
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
GetModuleHandleW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetFileSizeEx
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesExA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalDeleteAtom
CreateFileA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetThreadLocale
GetStringTypeExA
DeleteFileA
MoveFileA
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentThreadId
GlobalFindAtomA

user32

PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
WindowFromPoint
GetCursorPos
SetWindowRgn
DrawIcon
CharUpperA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
DeferWindowPos
GetScrollInfo
SetScrollInfo
ShowOwnedPopups
SystemParametersInfoA
GetWindowPlacement
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetMenuState
GetMenuStringA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
WinHelpA
SetWindowPos
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
EqualRect
GetDlgItem
GetKeyState
LoadIconA
PeekMessageA
LoadAcceleratorsA
SetActiveWindow
IsIconic
InsertMenuItemA
GetMenuItemID
GetMenuItemCount
IntersectRect
SetRectEmpty
GetMenu
GetLastActivePopup
BringWindowToTop
SetMenu
GetDesktopWindow
ShowWindow
IsWindow
TranslateAcceleratorA
ClientToScreen
SetRect
DrawTextA
SendMessageA
GetClientRect
GetDC
FrameRect
DrawMenuBar
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
AppendMenuA
CreatePopupMenu
DrawFocusRect
IsChild
AdjustWindowRectEx
GetWindowLongA
FillRect
MessageBeep
GetMenuItemInfoA
DestroyIcon
UnregisterClassA
DeleteMenu
CallWindowProcA
GetSysColorBrush
ReleaseDC
SetTimer
KillTimer
GetFocus
EnableWindow
RegisterWindowMessageA
CopyRect
InflateRect
LoadBitmapA
GetWindowRect
ScreenToClient
IsWindowVisible
RedrawWindow
GetCapture
SetCapture
ChildWindowFromPoint
LoadCursorA
GetSystemMetrics
SetCursor
ReleaseCapture
PostMessageA
GetDlgCtrlID
ClipCursor
SetWindowLongA
GetParent
GetTopWindow
InvalidateRect
UpdateWindow
OffsetRect
PtInRect
GetWindow
GetSysColor
GetClassInfoA
DefWindowProcA
RegisterClassA
EndPaint

gdi32

CreateCompatibleBitmap
StretchDIBits
CreateDIBitmap
GetStockObject
RemoveFontResourceExA
AddFontResourceExA
CreateFontA
CreateDCA
StartPage
EndPage
EndDoc
Escape
SelectObject
StretchBlt
GetBkColor
SetBitmapDimensionEx
PatBlt
SetBkColor
GetBitmapDimensionEx
SaveDC
RestoreDC
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
CreateBitmap
LineTo
MoveToEx
GetPixel
StartDocA
PtVisible
RectVisible
ExtTextOutA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
ExtCreatePen
CreateEllipticRgn
LPtoDP
GetCharWidthA
SetAbortProc
AbortDoc
GetTextMetricsA
Ellipse
DPtoLP
DeleteObject
SetBkMode
SetTextColor
TextOutA
Polygon
GetTextExtentPoint32A
BitBlt
Rectangle
CreateCompatibleDC
CreateSolidBrush
CreatePen
GetObjectA
GetDeviceCaps
IntersectClipRect
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

GetFileSecurityA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegCreateKeyA

shell32

ExtractIconA
FindExecutableA
SHGetFolderPathA
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW

ole32

CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeEx

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Sections

.text
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb6b29a97816e66b1c52e02b5814da41

Headers

DLL Characteristics

File Characteristics

Imports

dllriho

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Sections

.text Size: 493KB - Virtual size: 493KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 14KB - Virtual size: 57KB

.rsrc Size: 145KB - Virtual size: 145KB

.text
Size: 493KB - Virtual size: 493KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 14KB - Virtual size: 57KB

.rsrc
Size: 145KB - Virtual size: 145KB