07a9af70fc80ce1bb1762b04e7f685d0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

07a9af70fc80ce1bb1762b04e7f685d0_NeikiAnalytics
Size

258KB
MD5

07a9af70fc80ce1bb1762b04e7f685d0
SHA1

372c1db0baf153ad7af8fcdb4d08e5fde1dce3e8
SHA256

bca57387a409dcbb2a2779411200b56677d3d1b1b321968e81f5379f70d4b0bd
SHA512

d646306ba42e6ef31436cf41f520f88e2aad4945b9fc65f56768a7c00f545190d9d47fb87cf5e9423d9dfd0c230b1f1601d3e2243d305b7d9cffb6260096dd03
SSDEEP

3072:/ZK131YQSYZY9qAtj2R7Zg0j8d9ExmB2Tvexd9MdlNUaqE4y6qLOfr2CE6TGs+nY:/ZK13aBVYj666BMdjB6IOfrbB5+J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a9af70fc80ce1bb1762b04e7f685d0_NeikiAnalytics

Files

07a9af70fc80ce1bb1762b04e7f685d0_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

16cfce5b25829e3405088f1afbf10960

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
GetTickCount
GetNativeSystemInfo
VirtualQuery
VirtualAllocEx
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateTimerQueueTimer
DeleteTimerQueueTimer
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetUserDefaultLCID
ExitProcess
OpenProcess
VirtualQueryEx
ReadFile
WriteFile
ConnectNamedPipe
CreateNamedPipeW
CreateRemoteThread
ReadProcessMemory
WriteProcessMemory
VirtualFreeEx
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
IsDBCSLeadByteEx
GetModuleHandleExW
RtlUnwind
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
DeleteCriticalSection
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetEvent
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RaiseException
CloseHandle

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

psapi

GetModuleFileNameExW

msvcrt

__uncaught_exception
__CxxFrameHandler
_amsg_exit
memmove
_wcsicmp
free
memcpy
_wtoi
fgetws
fclose
fflush
strrchr
fopen
_beginthreadex
_setmode
iswspace
_errno
wcstol
ceil
calloc
abort
malloc
_wcsdup
__pctype_func
___lc_codepage_func
___mb_cur_max_func
fgetwc
ungetwc
fgetc
fgetpos
fsetpos
setvbuf
ungetc
_CxxThrowException
tolower
_callnewh
_initterm
__p___argc
__p___argv
__p__commode
?terminate@@YAXXZ
_lock
_unlock
_iob
iswctype
_wcstoui64
___lc_handle_func
__lc_collate_cp
_lseeki64
_XcptFilter
__getmainargs
_environ
_msize
__set_app_type
_fmode
?_set_new_mode@@YAHH@Z
_control87
mbtowc
_isatty
_CIlog10
_clearfp
wcsrchr
strchr
memset
realloc
_fileno

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 38.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16cfce5b25829e3405088f1afbf10960

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

psapi

msvcrt

Sections

.text Size: 196KB - Virtual size: 196KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 5KB - Virtual size: 38.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 196KB - Virtual size: 196KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 5KB - Virtual size: 38.5MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 10KB