102bff7b1679c597f1d5b3d82c4a7e982f5c6bc8f9f5795d25d134def81d05b6_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

102bff7b1679c597f1d5b3d82c4a7e982f5c6bc8f9f5795d25d134def81d05b6_NeikiAnalytics.exe
Size

240KB
MD5

657ed895c9636d68cf33724d6c8aa390
SHA1

84d13523e1bc2dba544e125b87c6df318cc4ebb5
SHA256

102bff7b1679c597f1d5b3d82c4a7e982f5c6bc8f9f5795d25d134def81d05b6
SHA512

e7948a8a183e3e94a763bbfc2e9f1222f3fec8a9a403eac730c5f0452704e2316437fd953a4cd3ca1470df76dd92d3713026287932b9eb42dc33e29d43f46421
SSDEEP

6144:oJ4uf07mKxh/gKfChsxQjLs9R1mkmtrgbzj:qkmK7/gKfChsxQfsz4kmtrgr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102bff7b1679c597f1d5b3d82c4a7e982f5c6bc8f9f5795d25d134def81d05b6_NeikiAnalytics.exe

Files

102bff7b1679c597f1d5b3d82c4a7e982f5c6bc8f9f5795d25d134def81d05b6_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

17016ce541cc5ef62aca6f6934b825ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
HeapFree
HeapAlloc
ExitProcess
RtlUnwind
GetCommandLineA
RaiseException
HeapSize
HeapReAlloc
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
GetFileSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTickCount
GetProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
SetErrorMode
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GlobalFree
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
GlobalLock
GlobalUnlock
MulDiv
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
SetLastError
GetCurrentThreadId
GetCurrentProcess
GetVersionExA
GetWindowsDirectoryA
lstrcpyA
lstrcatA
ReadFile
WriteFile
CopyFileA
GetFileAttributesA
SetFileAttributesA
FindClose
FormatMessageA
GetLogicalDrives
GetVolumeInformationA
DeviceIoControl
CreateFileA
CloseHandle
FreeLibrary
ResetEvent
WaitForSingleObject
LoadLibraryA
GetLastError
GetProcAddress
CreateEventA
FindFirstFileA
Sleep
UnhandledExceptionFilter
OutputDebugStringA

user32

CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
SendMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetClassNameA
EnumWindows
GetSystemMetrics
DrawIcon
LoadIconA
EnableWindow
LoadStringA
FindWindowA
SetForegroundWindow
IsIconic
ShowWindow
wsprintfA
RedrawWindow
CopyRect
GetParent
GetSysColor
LoadImageA
GetClientRect
DestroyMenu
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
InflateRect
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetWindowsHookExA
WinHelpA
SetDlgItemTextA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
CreateBitmap
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
DeleteObject
BitBlt
CreateDIBitmap
GetTextExtentPointA
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

olepro32

ord253

oleaut32

SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17016ce541cc5ef62aca6f6934b825ff

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 35KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 35KB

.rsrc
Size: 16KB - Virtual size: 12KB