aa17b721be87e4329c92627bfc8d5a9d27d5f0302486293bf44069414b1741cf_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

aa17b721be87e4329c92627bfc8d5a9d27d5f0302486293bf44069414b1741cf_NeikiAnalytics.exe
Size

132KB
MD5

d56d858b69456b709a4a88bb7648b4c0
SHA1

428cb7ba22c4df0fa9fdc7760f8fa087497358de
SHA256

aa17b721be87e4329c92627bfc8d5a9d27d5f0302486293bf44069414b1741cf
SHA512

05aa46cd4df5d5bacc9ac966998ebd824473d135227364e83426dbbdccad1a8ef399a0b4006020e3c05dca9c4bdcfab9d007843274f2de3f89beb258938abef5
SSDEEP

3072:eGkrw5yW+XZ1QcekyB2jqyS9BRqKY5nh90eAx0Snc8kjOHjPK:eGd+XTQclyIjqyS9B0KY5nu0Mc8kj+jK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa17b721be87e4329c92627bfc8d5a9d27d5f0302486293bf44069414b1741cf_NeikiAnalytics.exe

Files

aa17b721be87e4329c92627bfc8d5a9d27d5f0302486293bf44069414b1741cf_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

87f60dacc32b2ab1e388c26e1b6dbf0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wuauclt.pdb

Imports

msvcrt

_purecall
_wtoi
_vsnwprintf
memmove
_ftol
_wtol
wcsstr
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
wcslen
??2@YAPAXI@Z
_initterm
??3@YAXPAX@Z

atl

ord16
ord30
ord21

advapi32

GetUserNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
IsValidSid
CopySid
ImpersonateSelf
FreeSid
AllocateAndInitializeSid
InitiateSystemShutdownExW
RevertToSelf
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyW
AddAccessAllowedAce
InitializeAcl
GetLengthSid
RegOpenKeyExW
RegCloseKey

kernel32

GetTickCount
FreeLibrary
GetProcAddress
OpenEventW
GetSystemTime
FileTimeToSystemTime
GetCommandLineW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetTimeFormatW
CreateThread
GetLastError
GetCurrentProcess
DuplicateHandle
WaitForSingleObject
Sleep
ExitProcess
ReleaseMutex
SetEndOfFile
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
SetLastError
FlushFileBuffers
WriteFile
WideCharToMultiByte
HeapAlloc
SetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
GetStartupInfoW
EnterCriticalSection
LoadLibraryExW
GetSystemDirectoryW
InitializeCriticalSectionAndSpinCount
GetSystemWindowsDirectoryW
ReadFile
CreateFileW
LeaveCriticalSection
DeleteFileW
MultiByteToWideChar
CreateDirectoryW
GetFileAttributesW
GetProcessHeap
HeapReAlloc
HeapFree
LockResource
GetModuleHandleW
GetUserDefaultUILanguage
CloseHandle
CompareFileTime
GetSystemTimeAsFileTime
LoadResource
CompareStringW
GetCurrentThread
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
ExpandEnvironmentStringsW
lstrlenW
GetVersionExW
VerSetConditionMask
VerifyVersionInfoW
FindResourceExW
CreateMutexW

gdi32

GetTextMetricsW
GetObjectW
DeleteDC
CreateCompatibleDC
GetStockObject
SetBkMode
SetTextColor
DeleteObject
CreateFontIndirectW
SelectObject

user32

PeekMessageW
GetSystemMetrics
LoadStringW
DestroyIcon
ReleaseDC
GetDC
SetWindowPos
SendMessageW
SetWindowTextW
GetDlgItem
DestroyWindow
PostQuitMessage
IsWindowVisible
GetSysColor
GetFocus
DrawFocusRect
PtInRect
FillRect
LoadCursorW
SetCursor
SetCapture
ScreenToClient
ReleaseCapture
InvalidateRect
GetClassInfoExW
RegisterClassExW
DefWindowProcW
CreateDialogParamW
FindWindowW
FindWindowExW
DrawAnimatedRects
SetWindowLongW
CreateWindowExW
GetWindowTextLengthW
CheckDlgButton
GetClientRect
DrawIconEx
SetRect
DrawEdge
GetParent
BeginPaint
EndPaint
IsDlgButtonChecked
GetDlgItemTextW
GetSystemMenu
EnableMenuItem
SetFocus
SendDlgItemMessageW
SetDlgItemTextW
TranslateMessage
DispatchMessageW
LoadImageW
MsgWaitForMultipleObjects
IsDialogMessageW
ShowWindow
SetTimer
SetForegroundWindow
KillTimer
ExitWindowsEx
CharNextW
MapWindowPoints
GetWindowRect
DrawTextW
EnableWindow
SystemParametersInfoW
GetWindowLongW
GetWindowTextW

comctl32

InitCommonControlsEx

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoInitialize
CoTaskMemAlloc

oleaut32

SystemTimeToVariantTime

wuaucpl.cpl

ord1
ord4
ord2
ord3

wuaueng

ord1

msimg32

GradientFill

shell32

Shell_NotifyIconW

shlwapi

PathIsUNCW
PathStripToRootW
PathIsRelativeW
PathIsRootW
StrChrW
StrRChrW
PathFindExtensionW

wintrust

WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

87f60dacc32b2ab1e388c26e1b6dbf0d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

atl

advapi32

kernel32

gdi32

user32

comctl32

ole32

oleaut32

wuaucpl.cpl

wuaueng

msimg32

shell32

shlwapi

wintrust

crypt32

Sections

.text Size: 73KB - Virtual size: 73KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 57KB - Virtual size: 58KB

.text
Size: 73KB - Virtual size: 73KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 57KB - Virtual size: 58KB