ad71d29cc7f9cdb8693a1e34fdf5169ae32a07930890a63c5fc6cb2fec65f3c4_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ad71d29cc7f9cdb8693a1e34fdf5169ae32a07930890a63c5fc6cb2fec65f3c4_NeikiAnalytics.exe
Size

76KB
MD5

8e46d8327b2581db911b3b17f2253110
SHA1

09675120c1b30220e83b9489b665c208ad7743ab
SHA256

ad71d29cc7f9cdb8693a1e34fdf5169ae32a07930890a63c5fc6cb2fec65f3c4
SHA512

9a47118405d7387f29b3c13b9a26468cf9debd9c6e6e81b6e59d5cfe7def8d8bb244c8fcca613c47551f4faf9de7b1db9077d817f6c0792c0585f23d289aaf69
SSDEEP

1536:KQ2lOQ2Q8U2cBGy/f/NnEdp/XUG6b87CkcbO1loTtMRz59:Z2+fHMGy/fG2kc2yTt29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad71d29cc7f9cdb8693a1e34fdf5169ae32a07930890a63c5fc6cb2fec65f3c4_NeikiAnalytics.exe

Files

ad71d29cc7f9cdb8693a1e34fdf5169ae32a07930890a63c5fc6cb2fec65f3c4_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

1f5089cd9bf7fcb37ddfa54c5f1d03bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ssr32_0g

SrVect_MoveTo
SrStartPage
SrGenCharFromBits
UnClipSubObj
SrAbort
SrNextBand
SrResetContext
SrSetTransfer
SrVect_Open
SrSendPage
SrVect_LineTo
SrVect_CurveTo
SrVect_ClosePath
PutSubObj
StyleLen
SrVect_GetPoints
SrVect_nVertices
SrPattBrushEx
SrVect_Close

sddm320g

SDDMCheckEndPage
SDDMReadProfile
SDDMLoadDriver
SDDMResetDC
SDDMPageMark
SDDMCheckStartPage
SDDMGetDDMInfo
SDDMCloseJob
SDDMLoadThresholds
SDDMFreeThresholds
SDDMOpenJob

kernel32

lstrcmpiA
ReadProcessMemory
MulDiv
IsDBCSLeadByte
GetTempPathA
GetModuleHandleA
GetCurrentThread
GetThreadSelectorEntry
GetCurrentProcess
GetPrivateProfileStringA
HeapAlloc
_lclose
_lread
_llseek
_lopen
lstrcpyA
GetProcAddress
CreateFileA
GetTempFileNameA
DeleteFileA
CloseHandle
HeapCreate
HeapDestroy
HeapReAlloc
HeapFree
LocalFree
GetVersion
lstrcmpA
LocalAlloc
lstrlenA
GetCPInfo
GetTickCount
GetLastError
WriteFile

user32

GetActiveWindow
UnionRect
LoadStringA
IntersectRect
GetParent
GetDC
ReleaseDC
wsprintfA

gdi32

CreateBitmapIndirect
GetOutlineTextMetricsA
GetCharWidthA
GetTextMetricsA
GetTextFaceA
GetGlyphOutlineA
GetRasterizerCaps
CreateFontIndirectA
PatBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateCompatibleDC
SetTextColor
GetStockObject
SelectObject

msvcrt

_ftol
qsort
strtok
_stricmp
__CxxFrameHandler
free
bsearch
_initterm
malloc
_adjust_fdiv

Exports

Exports

SdBitBlt
SdColorInfo
SdControl
SdCreateDIBitmap
SdDIBToDevice
SdDeviceBitmap
SdDeviceBitmapBits
SdDisable
SdEnable
SdEnumObj
SdExtTextOut
SdFastBorder
SdFlushScanlines
SdOutput
SdPixel
SdRealizeObject
SdScanLR
SdSetAttribute
SdStrBlt
SdStretchBlt
SdStretchDIB

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f5089cd9bf7fcb37ddfa54c5f1d03bb

Headers

File Characteristics

Imports

ssr32_0g

sddm320g

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 1KB