076b70cf99e3382deee625fff0973dcddb44400bb2d60eb1867db085b009b7fa_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

076b70cf99e3382deee625fff0973dcddb44400bb2d60eb1867db085b009b7fa_NeikiAnalytics.exe
Size

1.5MB
MD5

af508328380798398556cae0e3b81780
SHA1

7a307f2ab9c866b1dc867cefa4c74153e37d7a07
SHA256

076b70cf99e3382deee625fff0973dcddb44400bb2d60eb1867db085b009b7fa
SHA512

03478109b74c776ec936c324cd927c695d9a3fb53b40e3be04ac35d70b3bf2866e618848a0f38836413f661458e41629109633ab0b7c00d3b616eb765af79b2f
SSDEEP

24576:AhfSZj2olJKP9XeMBsmDGjcurOq7ZHJ1QZjYMgMO:uaN21P9OnNjh7ZbMgM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
076b70cf99e3382deee625fff0973dcddb44400bb2d60eb1867db085b009b7fa_NeikiAnalytics.exe

Files

076b70cf99e3382deee625fff0973dcddb44400bb2d60eb1867db085b009b7fa_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

518655fee1d046d78746484db71e77cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetVersionExA
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetStringTypeA
HeapDestroy
IsBadReadPtr
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
VirtualAlloc
FatalAppExitA
WideCharToMultiByte
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
Sleep
WaitForSingleObject
CreateFileA
SetCommTimeouts
GetCommState
BuildCommDCBA
SetCommState
WriteFile
ReadFile
GetProfileStringA
LCMapStringW
LCMapStringA
GetACP
HeapSize
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetSystemTime
ExitThread
GetFileType
SetStdHandle
HeapFree
CreateThread
TerminateProcess
ExitProcess
HeapAlloc
RaiseException
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
GlobalSize
RtlUnwind
CopyFileA
SystemTimeToFileTime
SetErrorMode
SetFileAttributesA
GetShortPathNameA
LocalFileTimeToFileTime
GetFileSize
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
DeleteFileA
FindFirstFileA
FindClose
UnlockFile
MoveFileA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetCurrentDirectoryA
GetCurrentProcess
DuplicateHandle
GetProcessVersion
GetOEMCP
GetCPInfo
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
MulDiv
SizeofResource
GlobalFlags
GetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
GetDiskFreeSpaceA
GetFileTime
GetProfileIntA
GetFullPathNameA
GetFileAttributesA
GetTempFileNameA
SearchPathA
GetTempPathA
GetPrivateProfileStringA
SetLastError
WritePrivateProfileStringA
SuspendThread
GetPrivateProfileIntA
CreateEventA
SetEvent
SetThreadPriority
ResumeThread
GetCurrentThread
GetModuleFileNameA
GlobalAlloc
lstrlenW
lstrcmpA
lstrcpynA
MultiByteToWideChar
FormatMessageA
LocalFree
SetEnvironmentVariableA
InterlockedDecrement
CloseHandle
InterlockedIncrement
lstrlenA
LoadLibraryA
FreeLibrary
GetVersion
GetLocaleInfoW
GetStringTypeW
IsBadCodePtr

user32

SetMenuItemBitmaps
ClientToScreen
WindowFromPoint
KillTimer
SetTimer
PtInRect
IsZoomed
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
OemToCharA
CharToOemA
wvsprintfA
GetDC
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetRect
GetCursorPos
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
ModifyMenuA
ShowOwnedPopups
EndDeferWindowPos
ValidateRect
PostQuitMessage
GetMenuStringA
CharUpperA
ShowScrollBar
GetScrollRange
GetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
InvertRect
GetSystemMenu
SetParent
AppendMenuA
GetTabbedTextExtentA
IsRectEmpty
FindWindowA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindowVisible
TranslateMessage
ScrollWindow
BeginDeferWindowPos
CopyRect
DestroyIcon
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetScrollPos
SetScrollRange
MessageBoxA
GetActiveWindow
SendMessageA
EnableWindow
LockWindowUpdate
DeleteMenu
InsertMenuA
InflateRect
GetDCEx
LoadStringA
GetClassNameA
GetSysColorBrush
GetDialogBaseUnits
TabbedTextOutA
GrayStringA
DrawTextA
GetWindowDC
EndPaint
BeginPaint
DestroyCursor
FillRect
LoadCursorA
WaitMessage
RemoveMenu
SetCapture
GetScrollInfo
GetMessageA
SetScrollInfo
SetDlgItemTextA
IsDlgButtonChecked
BringWindowToTop
DefDlgProcA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
CharNextA
IsWindowUnicode

gdi32

GetClipBox
SetBkColor
GetObjectA
CreateBitmap
PatBlt
CreateRectRgnIndirect
SelectObject
DeleteDC
StretchDIBits
GetTextMetricsA
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
GetDeviceCaps
GetStockObject
GetCharWidthA
DPtoLP
CreatePen
Rectangle
AbortDoc
EndDoc
GetViewportOrgEx
StartPage
StartDocA
EndPage
CreateDCA
SaveDC
SetAbortProc
SelectPalette
SetBkMode
RestoreDC
SetROP2
SetStretchBltMode
SetPolyFillMode
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
CreateFontA
SetViewportExtEx
GetDCOrgEx
SetWindowOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
OffsetClipRgn
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
SetTextCharacterExtra
SetMapperFlags
SetTextJustification
ArcTo
SetArcDirection
GetCurrentPositionEx
PolylineTo
SetColorAdjustment
PolyDraw
GetClipRgn
CreateRectRgn
PolyBezierTo
ExtSelectClipRgn
PlayMetaFileRecord
SelectClipPath
EnumMetaFile
PlayMetaFile
GetObjectType
GetWindowExtEx
ExtCreatePen
GetViewportExtEx
CreateHatchBrush
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
CreateDIBPatternBrushPt
ExtTextOutA
Escape
TextOutA
GetMapMode
SetRectRgn
CreateFontIndirectA
LPtoDP
GetBkColor
CombineRgn
GetTextColor
GetStretchBltMode
GetNearestColor
GetTextAlign
GetBkMode
GetPolyFillMode
GetTextFaceA
GetWindowOrgEx
GetROP2
BitBlt
CopyMetaFileA
CreateDIBitmap
GetTextExtentPointA
SetTextColor
GetTextExtentPoint32A

comdlg32

GetSaveFileNameA
PageSetupDlgA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

GetFileSecurityA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegCreateKeyA
RegSetValueA

shell32

SHGetFileInfoA
DragFinish
DragAcceptFiles
DragQueryFileA
ExtractIconA

comctl32

ord14
ord17
ord13
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write

ole32

SetConvertStg
CreateBindCtx
OleDuplicateData
CoCreateInstance
WriteFmtUserTypeStg
CoDisconnectObject
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
SysStringLen
SysAllocStringLen
VariantChangeType
SysReAllocStringLen
VariantCopy
SafeArrayGetUBound
VariantClear
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayRedim
SysStringByteLen
SafeArrayCreate
VarBstrFromCy
VarDateFromStr
VarCyFromStr
SafeArrayCopy
SafeArrayAllocData
VarBstrFromDate
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayAllocDescriptor
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
LoadTypeLi

wsock32

ntohs
htonl
htons
inet_addr
connect
sendto
recvfrom
getpeername
getsockname
recv
gethostbyname
WSACleanup
WSAStartup
WSASetLastError
WSAGetLastError
WSAAsyncSelect
socket
send
accept
ioctlsocket
bind
inet_ntoa
closesocket

Sections

.text
Size: 800KB - Virtual size: 798KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

518655fee1d046d78746484db71e77cd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

wsock32

Sections

.text Size: 800KB - Virtual size: 798KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 44KB - Virtual size: 58KB

.idata Size: 16KB - Virtual size: 15KB

.rsrc Size: 488KB - Virtual size: 484KB

.reloc Size: 56KB - Virtual size: 54KB

.text
Size: 800KB - Virtual size: 798KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 44KB - Virtual size: 58KB

.idata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 488KB - Virtual size: 484KB

.reloc
Size: 56KB - Virtual size: 54KB