0f295f36f1a4b64c1374edc17b6e1a60_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

0f295f36f1a4b64c1374edc17b6e1a60_NeikiAnalytics
Size

355KB
MD5

0f295f36f1a4b64c1374edc17b6e1a60
SHA1

6d8e15746d4be2c5a7576442b97f87a2335b5ab0
SHA256

08134220ffb93305daff7f6d48ff75c896f165bb2eabc2b49e234ecfe75f5847
SHA512

980533f1be566a58353966a615a71c702657c4db4e20b6ba4ae181a9fcfc83b0cc5a059f2906b304110b2919530b65bb96cb7ca0880caf312b709ea1d03b1f67
SSDEEP

6144:pTiZ5nV/KEuAG8UoozxwwmnJKWTPTIr5Ee/mNTBoggV:4Z5nVC5D8NWMsWTPK5WT2gM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f295f36f1a4b64c1374edc17b6e1a60_NeikiAnalytics

Files

0f295f36f1a4b64c1374edc17b6e1a60_NeikiAnalytics
.exe windows:4 windows x64 arch:x64

f3825654c0b19a88cb5a2dc58187f634

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_fileno
_errno
_gmtime64
_initterm
_lock
_mkdir
_onexit
_setjmp
_stat64
_unlock
_utime64
abort
atof
calloc
clearerr
clock
exit
fclose
feof
ferror
fflush
fopen
fprintf
fputc
fread
free
frexp
fwrite
getc
getenv
localeconv
longjmp
malloc
memcmp
memcpy
memset
remove
rename
signal
strcpy
strerror
strlen
strncat
strncmp
strncpy
strtol
vfprintf
wcslen

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3825654c0b19a88cb5a2dc58187f634

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 267KB - Virtual size: 266KB

.data Size: 6KB - Virtual size: 5KB

.rdata Size: 61KB - Virtual size: 61KB

.pdata Size: 8KB - Virtual size: 7KB

.xdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 41KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 104B

.text
Size: 267KB - Virtual size: 266KB

.data
Size: 6KB - Virtual size: 5KB

.rdata
Size: 61KB - Virtual size: 61KB

.pdata
Size: 8KB - Virtual size: 7KB

.xdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 41KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 104B