130c7bf0de48066d0c5df71cad4c78b48f8c7b351551de19562c2f4789be0b9c_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

130c7bf0de48066d0c5df71cad4c78b48f8c7b351551de19562c2f4789be0b9c_NeikiAnalytics.exe
Size

2.2MB
MD5

5f373bf3ce11de050d5aa6e157ef7f00
SHA1

d41a7402d3cc65c3068923156576c5d205622acf
SHA256

130c7bf0de48066d0c5df71cad4c78b48f8c7b351551de19562c2f4789be0b9c
SHA512

27fba37d633b3f6bfc48e8061aa7ebe6234cf81a14ceb618fcea2688e0a19c1072cf727b0b0ccbc33628e16fe1b77b8e959f0fe18fc2c00a115a63e335129c97
SSDEEP

24576:C0QYH9tIAIrL4POwsmK/p3X2ZRC5LOnSNqGaFB3cQRYw9r1nvhSQf8v6S9Epq:CauAIrLrBjzzdEpq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130c7bf0de48066d0c5df71cad4c78b48f8c7b351551de19562c2f4789be0b9c_NeikiAnalytics.exe

Files

130c7bf0de48066d0c5df71cad4c78b48f8c7b351551de19562c2f4789be0b9c_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

4cb4138202d5dd9c320263ae05dbd022

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamClose
midiOutReset
midiStreamStop
midiStreamRestart
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
waveOutWrite
waveOutPause
waveOutReset
waveOutClose
waveOutGetNumDevs
waveOutOpen
midiOutUnprepareHeader
midiStreamOpen
waveOutPrepareHeader
waveOutUnprepareHeader

ws2_32

closesocket
WSACleanup
WSAAsyncSelect
inet_ntoa
accept
getpeername
recv
ioctlsocket
recvfrom

kernel32

GetTimeZoneInformation
Beep
InterlockedExchange
SetStdHandle
IsBadCodePtr
IsBadReadPtr
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
RaiseException
GetSystemTime
RtlUnwind
GetStartupInfoA
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
LocalFree
InterlockedDecrement
InterlockedIncrement
GetProfileStringA
LeaveCriticalSection
CloseHandle
WaitForSingleObject
CreateProcessA
GetTickCount
GetCommandLineA
MulDiv
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
DeleteFileA
MoveFileA
GetFileAttributesA
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
GetPrivateProfileStringA
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
WritePrivateProfileStringA
GetVersionExA
lstrlenW
lstrlenA
LoadLibraryA
FreeLibrary
GetFullPathNameA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
GetDriveTypeA
FindNextFileA
lstrcpyA
WinExec
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
LockResource
LoadResource
FindResourceA
SetEvent
DeviceIoControl
CreateFileA
WaitForMultipleObjects
GetLastError
ReadFile
SetLastError
MultiByteToWideChar
LoadLibraryExA
GetWindowsDirectoryA
TerminateProcess
WideCharToMultiByte
GetLocalTime
SystemTimeToFileTime
UnmapViewOfFile
DuplicateHandle
CreateFileMappingA
MapViewOfFile
GetFileType
GetFileInformationByHandle
GetFileSize
SetFilePointer
FileTimeToLocalFileTime
FileTimeToDosDateTime
FileTimeToSystemTime
lstrcpynA
lstrcmpiA
lstrcmpA
IsDBCSLeadByte
GetCurrentProcess
FlushInstructionCache
GetVersion
WriteFile

user32

ShowWindow
LoadImageA
EnumDisplaySettingsA
ClientToScreen
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
LoadIconA
TranslateMessage
SystemParametersInfoA
GetMenuItemCount
GetMenuItemInfoA
GetWindowDC
GetSysColorBrush
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DrawMenuBar
GetMenuItemRect
GetMenuItemID
IsMenu
GetDesktopWindow
WindowFromDC
TabbedTextOutA
DrawTextA
CharUpperA
CreateWindowExA
RegisterHotKey
UnregisterHotKey
GetClassNameA
GrayStringA
GetDlgItem
FindWindowExA
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
GetWindowTextLengthA
EnumChildWindows
CallNextHookEx
FrameRect
GetForegroundWindow
SetWindowTextA
LoadStringA
UnregisterClassA
GetMenuState
CreateIconIndirect
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetSystemMenu
DeleteMenu
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
InflateRect
SetRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
BeginPaint
EndPaint
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetLastActivePopup
GetMessageTime
GetClassLongA
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
MoveWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetIconInfo
CheckMenuItem
wsprintfA
WaitForInputIdle
CopyIcon

gdi32

ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
RealizePalette
ExtSelectClipRgn
GetViewportExtEx
OffsetRgn
FrameRgn
GetNearestPaletteIndex
GetTextMetricsA
CreateEllipticRgnIndirect
MoveToEx
LineTo
SetBkMode
GdiFlush
TranslateCharsetInfo
CreateFontA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetTextColor
GetClipBox
SetBkColor
CreateRectRgnIndirect
CreateDIBSection
SetPixel
ExtCreateRegion
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt
SelectPalette
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBrushIndirect
CreateHatchBrush
CreateBitmap
CreatePatternBrush
SelectObject
CreatePen
PatBlt
FillRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
CreateCompatibleDC
SetPixelV
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
Arc
GetTextExtentPoint32A
GetDeviceCaps
SetMapMode

msimg32

TransparentBlt
GradientFill
AlphaBlend

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA

shell32

SHChangeNotify
SHGetSpecialFolderPathA
Shell_NotifyIconA
DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteA

ole32

CoCreateInstance
CLSIDFromString
OleUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium

oleaut32

UnRegisterTypeLi
OleCreatePictureIndirect
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SysAllocString
VariantInit
VariantCopyInd
VariantChangeType
VariantClear

odbc32

ord45
ord4
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord46
ord68
ord43
ord41
ord2
ord1
ord23
ord50
ord51
ord15
ord9
ord14
ord11
ord10
ord3
ord19
ord72
ord12
ord18
ord13
ord61
ord16
ord5

comctl32

ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_Add
ImageList_Draw
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Duplicate
ImageList_DragLeave
ImageList_Read
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ord17
ImageList_GetIcon
_TrackMouseEvent

wldap32

ord29

comdlg32

ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

Sections

.text
Size: 956KB - Virtual size: 953KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cb4138202d5dd9c320263ae05dbd022

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

wldap32

comdlg32

Sections

.text Size: 956KB - Virtual size: 953KB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 80KB - Virtual size: 427KB

.rsrc Size: 48KB - Virtual size: 44KB

.text
Size: 956KB - Virtual size: 953KB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 80KB - Virtual size: 427KB

.rsrc
Size: 48KB - Virtual size: 44KB