14f8098af1d4945a1cbe3bf9b31bdfa4d38d64df11431e7ea20e99bedb08cdbd_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

14f8098af1d4945a1cbe3bf9b31bdfa4d38d64df11431e7ea20e99bedb08cdbd_NeikiAnalytics.exe
Size

7.3MB
MD5

326c44b72ac8e1c06ec6861224975810
SHA1

814acbd496bde116f0c958c3f5a59e5a744a2ed8
SHA256

14f8098af1d4945a1cbe3bf9b31bdfa4d38d64df11431e7ea20e99bedb08cdbd
SHA512

3acbb7eab0784282681bd3c9bbdcb1b170ef5c7268c03944dd57e269d0bb82854297beef1dd2f0de6031dacef44dc5caa6d1586970e3ca55109ff3a202c03ae2
SSDEEP

98304:pM+4LvLUKPljsT0ModfHa1kZPOQt3Jxa2g1lgw1bpweKQoXIAAyP/U:u+GvLUK20eiPNtza2gvg6bpwIsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f8098af1d4945a1cbe3bf9b31bdfa4d38d64df11431e7ea20e99bedb08cdbd_NeikiAnalytics.exe

Files

14f8098af1d4945a1cbe3bf9b31bdfa4d38d64df11431e7ea20e99bedb08cdbd_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

f6d3109c3c2e8e78c1ac7080af0ffba2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\Administrator\Desktop\shlexc\out\release\zanclxjdx.pdb

Imports

kernel32

GetTickCount
ReadConsoleOutputA
WideCharToMultiByte
LoadLibraryW
GetConsoleWindow
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
CreateJobObjectA
GetFileSizeEx
GetStdHandle
CreateConsoleScreenBuffer
GetTempFileNameA
OpenMutexA
GetConsoleScreenBufferInfo
SetEnvironmentVariableA
ConvertDefaultLocale
lstrcatW
VirtualProtect
CloseHandle
GetComputerNameW
CreateThread
IsProcessorFeaturePresent
WriteConsoleW
SetStdHandle
HeapReAlloc
HeapSize
RtlUnwind
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
SetHandleInformation
GetEnvironmentStringsW
GetCurrentProcess
SetEnvironmentVariableW
lstrlenA
FillConsoleOutputCharacterA
GetCommandLineW
GetTempPathA
ExitProcess
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
EncodePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
WriteFile
HeapCreate
HeapDestroy
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer

user32

SetCursor
GetWindowRect
LoadStringA
DialogBoxParamW
IsClipboardFormatAvailable
GetGuiResources
wsprintfA
FindWindowW
CharUpperBuffA
GetWindowTextW
LoadCursorFromFileW
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
PostMessageA
SetWindowTextA
MoveWindow
IsDialogMessageA

gdi32

CreateDCA
CreateBrushIndirect
SetTextColor

advapi32

IsTextUnicode
GetUserNameW
OpenProcessToken
DuplicateTokenEx

shlwapi

StrRChrIA
PathRemoveFileSpecW

Exports

Exports

ObvGXoFThyuIWhvm
jmweczbxcvjsi
migjtsuukjvt
pzvmkcouyvqk
vyhbiozzrw
zjjcrmbehoakm

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6d3109c3c2e8e78c1ac7080af0ffba2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 7KB - Virtual size: 6KB

.rsrc Size: 7.2MB - Virtual size: 7.2MB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 7.2MB - Virtual size: 7.2MB