2e38d338021d66c419af94b0195a27a358112a1d002bda70736d9800650a7d16_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2e38d338021d66c419af94b0195a27a358112a1d002bda70736d9800650a7d16_NeikiAnalytics.exe
Size

2.2MB
MD5

49382b76faf4f8526c4eba2d829f0890
SHA1

12c148f222a8b41753b52699422bc9244ff2b745
SHA256

2e38d338021d66c419af94b0195a27a358112a1d002bda70736d9800650a7d16
SHA512

a82c305e3b8425c697fa5c0173b196ba51f1fe612a7f45dfc866ada36f36d0e5c684f0b15e4f03a398a73adedc84a64a77c2fc614c9b0f87f999b4c41bfdf14d
SSDEEP

49152:X+5m+DwI8UoFkvtv1g9tz/lX4wOJTr1Wd8E:X+5m+DwI8U3vtN4tz/lXL01I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e38d338021d66c419af94b0195a27a358112a1d002bda70736d9800650a7d16_NeikiAnalytics.exe

Files

2e38d338021d66c419af94b0195a27a358112a1d002bda70736d9800650a7d16_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

30813dba2884e3afc3612dc5caedb221

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetLineInfoA
mciSendCommandA
timeKillEvent
mixerSetControlDetails
timeBeginPeriod
timeSetEvent
sndPlaySoundA
mciGetErrorStringA
mixerOpen
mixerGetNumDevs
mixerClose
timeEndPeriod
timeGetTime
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInGetDevCapsA
waveInGetNumDevs
waveInStart
waveInOpen
waveInClose
waveInReset
mixerGetControlDetailsA
mixerGetLineControlsA

wsock32

send
__WSAFDIsSet
socket
gethostbyname
inet_addr
closesocket
recv
select
WSAStartup
WSACleanup
WSAGetLastError
htons
ioctlsocket
connect

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest
acmStreamOpen
acmStreamSize

kernel32

Sleep
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
TlsGetValue
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
InitializeCriticalSection
TlsAlloc
TlsFree
FreeResource
LockResource
LoadResource
FindResourceA
GlobalSize
GetFileType
FlushFileBuffers
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetCurrentThreadId
SetThreadPriority
CreateThread
TerminateThread
CreateEventA
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedDecrement
OpenFile
VirtualLock
VirtualProtect
GlobalHandle
lstrcatA
lstrcmpA
IsDBCSLeadByte
LocalUnlock
LocalLock
LocalAlloc
lstrcmpiA
FileTimeToDosDateTime
IsBadStringPtrA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetVolumeLabelA
GetLocalTime
MoveFileA
VirtualUnlock
VirtualFree
VirtualAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
SetLastError
DuplicateHandle
LockFile
UnlockFile
GetStringTypeExA
GetThreadLocale
GetFileTime
LocalReAlloc
GlobalFlags
GetCPInfo
GetOEMCP
SizeofResource
RtlUnwind
RaiseException
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
GetACP
HeapSize
SetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
SetEnvironmentVariableA
GetLocaleInfoW
GetSystemDefaultLangID
DeviceIoControl
SetErrorMode
GetLogicalDriveStringsA
WriteFile
GetFileSize
SetEndOfFile
FreeLibrary
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
lstrcpyA
GetFileAttributesA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
CloseHandle
InterlockedExchange
ReadFile
SetFilePointer
CreateFileA
FindNextFileA
InterlockedIncrement
GetCurrentDirectoryA
SetCurrentDirectoryA
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
SystemTimeToFileTime
GetSystemTime
SetFileTime
DeleteFileA
lstrlenW
SetFileAttributesA
RemoveDirectoryA
CreateDirectoryA
GetDiskFreeSpaceA
GetModuleHandleA
GetExitCodeProcess
GetLastError
CreateProcessA
lstrlenA
GetTempFileNameA
MulDiv
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileSectionA
CopyFileA
GetVersionExA
MoveFileExA
GetShortPathNameA
GetWindowsDirectoryA
MultiByteToWideChar
LocalFree
FormatMessageA
GetTempPathA
GetModuleFileNameA
TerminateProcess
OpenProcess
LoadLibraryExA
GetTickCount
ResetEvent
SetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetLocaleInfoA
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessVersion
ExpandEnvironmentStringsA
GetComputerNameA
GetSystemDirectoryA
GetDriveTypeA
GetProfileStringA
GlobalMemoryStatus
WideCharToMultiByte

user32

BeginPaint
EndPaint
IsDialogMessageA
IsWindowEnabled
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
LoadStringA
ValidateRect
GetMessageA
WindowFromPoint
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetNextDlgGroupItem
SetWindowContextHelpId
MapDialogRect
CopyAcceleratorTableA
RegisterClipboardFormatA
ShowOwnedPopups
GetSysColorBrush
PostThreadMessageA
DrawStateA
DrawFocusRect
SetActiveWindow
DrawAnimatedRects
SetParent
FindWindowA
EnumChildWindows
GetClassNameA
TrackPopupMenu
LoadMenuA
SetMenuDefaultItem
ReleaseCapture
MapWindowPoints
FillRect
ExitWindowsEx
IsWindowVisible
KillTimer
SetTimer
UnionRect
ClientToScreen
RemoveMenu
DrawMenuBar
GetMenu
DefWindowProcA
GetClassInfoA
RegisterClassA
CreateWindowExA
DestroyWindow
GetWindowDC
GetAsyncKeyState
MessageBeep
GetNextDlgTabItem
GetMenuItemCount
GetMenuItemID
GetMenuState
SendDlgItemMessageA
GetSubMenu
AppendMenuA
CreatePopupMenu
SetMenu
CreateMenu
GetWindowRgn
SetWindowRgn
ShowWindow
GetCursorPos
RedrawWindow
PtInRect
GetClientRect
EqualRect
MoveWindow
LoadCursorA
SetCursor
InvalidateRect
UpdateWindow
IntersectRect
OffsetRect
GetMessagePos
ScreenToClient
LoadImageA
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowPos
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
CopyRect
MessageBoxA
GetDesktopWindow
GetDC
ReleaseDC
SystemParametersInfoA
MsgWaitForMultipleObjects
wsprintfA
TranslateMessage
DispatchMessageA
GetSysColor
InflateRect
LoadBitmapA
DrawIconEx
DestroyIcon
SetRect
SetWindowLongA
GetParent
CallWindowProcA
PeekMessageA
PostQuitMessage
IsWindow
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EnableWindow
GetKeyState
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
RegisterWindowMessageA
IsIconic
GetTopWindow
GetMenuStringA
WinHelpA
GetWindowPlacement
CharToOemA
OemToCharBuffA
CharLowerA
DeleteMenu
SetDlgItemTextA
SetWindowTextA
EndDialog
DialogBoxParamA
GetActiveWindow
OemToCharA
CharNextA
CharPrevA
CharUpperBuffA
CharLowerBuffA
UnregisterClassA
IsChild
InvalidateRgn
SetCapture
GetCapture
SetFocus
GetFocus
GetSystemMenu
SendMessageA
WaitForInputIdle
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
LoadIconA

gdi32

ExtSelectClipRgn
GetTextColor
LineTo
MoveToEx
SelectClipRgn
ScaleWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
RestoreDC
SaveDC
GetClipBox
SetTextColor
SetBkMode
GetEnhMetaFileA
GetMetaFileA
GetMetaFileBitsEx
DeleteMetaFile
SetWinMetaFileBits
GetEnhMetaFileHeader
PlayEnhMetaFile
DeleteEnhMetaFile
SetMapMode
SetBkColor
StretchDIBits
GdiFlush
CreateDIBitmap
GetDIBits
GetSystemPaletteEntries
CreateRoundRectRgn
CreateRectRgnIndirect
IntersectClipRect
GetWindowOrgEx
SelectPalette
RealizePalette
CreateHalftonePalette
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
CreateCompatibleBitmap
CreateFontIndirectA
GetTextMetricsA
PtInRegion
CreateBitmap
CreatePatternBrush
PatBlt
CreateRectRgn
CreatePalette
EnumFontFamiliesExA
CreateScalableFontResourceA
GetTextExtentPoint32A
RemoveFontResourceA
AddFontResourceA
CreateFontA
CreateSolidBrush
CreatePen
Rectangle
GetStockObject
GetObjectA
ExtCreateRegion
CombineRgn
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetPaletteEntries
BitBlt
DeleteObject
CreateCompatibleDC
LPtoDP
CreateDIBSection
SelectObject
GetMapMode
GetWindowExtEx
GetViewportExtEx
DPtoLP
GetBkColor
GetTextExtentPointA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyA
RegEnumKeyA
LookupAccountSidA
GetUserNameA
RegConnectRegistryA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA

shell32

ShellExecuteA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileA
DragFinish
SHBrowseForFolderA
ExtractIconA
SHAppBarMessage
Shell_NotifyIconA
SHGetPathFromIDListA

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
VariantClear
SysFreeString
LoadTypeLi
RegisterTypeLi
VariantInit
SysAllocString
SysStringLen

urlmon

URLDownloadToFileA

netapi32

Netbios

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30813dba2884e3afc3612dc5caedb221

Headers

File Characteristics

Imports

winmm

wsock32

version

msacm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

netapi32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 292KB - Virtual size: 290KB

.data Size: 180KB - Virtual size: 489KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 292KB - Virtual size: 290KB

.data
Size: 180KB - Virtual size: 489KB

.rsrc
Size: 68KB - Virtual size: 67KB