328c723928a1387bdbfd650885bd4a2e7b412278acaa07fe80fc15b4f6f7f323_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

328c723928a1387bdbfd650885bd4a2e7b412278acaa07fe80fc15b4f6f7f323_NeikiAnalytics.exe
Size

887KB
MD5

04987469a57d2145a09a1ec242455a80
SHA1

80610d074cab01e695b4816eadb7036022b8c375
SHA256

328c723928a1387bdbfd650885bd4a2e7b412278acaa07fe80fc15b4f6f7f323
SHA512

300bdaef53b419aa2d690f3af9349520d2ad7ab06aa04d1b02171237ed64755876ff2060f3d52cba3fdb05121c9e9e59cc72e971f1ef8193d0da0f18bc17ab68
SSDEEP

24576:SdR65H2ryEFv6gUXcXBUqh0lhSMXl2jk3/eFP:SdR22rDFTUMXBure

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328c723928a1387bdbfd650885bd4a2e7b412278acaa07fe80fc15b4f6f7f323_NeikiAnalytics.exe

Files

328c723928a1387bdbfd650885bd4a2e7b412278acaa07fe80fc15b4f6f7f323_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

33e042432f9e7580181977eaa1ca2fa3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
SetConsoleTitleA
Sleep
AttachConsole
SetConsoleCursorInfo
ExitProcess
GetConsoleWindow
AllocConsole
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetLastError
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
GlobalLock
OpenThread
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetFileSizeEx
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GlobalFree
GlobalAlloc
MultiByteToWideChar
CreateThread
GetStdHandle
SetConsoleTextAttribute
VirtualQuery
GetSystemInfo
VirtualAlloc
SetThreadContext
VirtualFree
GetTimeZoneInformation
GetModuleFileNameW
GetModuleHandleExW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
TerminateProcess
ReadFile
RtlUnwind

user32

GetSystemMetrics
GetAsyncKeyState
SetClipboardData
GetWindowThreadProcessId
GetWindow
IsWindowVisible
SetWindowLongPtrW
EnumWindows
CallWindowProcW
SetWindowPos
GetKeyState
GetMessageExtraInfo
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData

d3dcompiler_47

D3DCompile

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

Sections

.text
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33e042432f9e7580181977eaa1ca2fa3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3dcompiler_47

imm32

Sections

.text Size: 555KB - Virtual size: 555KB

.rdata Size: 297KB - Virtual size: 296KB

.data Size: 6KB - Virtual size: 12KB

.pdata Size: 25KB - Virtual size: 24KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 555KB - Virtual size: 555KB

.rdata
Size: 297KB - Virtual size: 296KB

.data
Size: 6KB - Virtual size: 12KB

.pdata
Size: 25KB - Virtual size: 24KB

.reloc
Size: 3KB - Virtual size: 2KB