6c904b3eedec6f76fee603fc226daa20_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

6c904b3eedec6f76fee603fc226daa20_NeikiAnalytics
Size

349KB
MD5

6c904b3eedec6f76fee603fc226daa20
SHA1

d88a926bca951c50ddd30b793be6815873bde0c9
SHA256

ac6b618b54b87014765ac8bcd8d31c38ef3ae5ee5011bafb407fddb7631bc0d2
SHA512

a1dd9489b530c611085d4d9abe1574e805e200cf77ca6d158a0f468103cb3c98b691bdfc492f3a5dfc037fe37d2a1bee8df42c7bbef2bdd0f1e521ea9b1c8e01
SSDEEP

6144:HlPJ0afkbuh8dd1FmEGPCvRDOlv0J1ChVkS8ps463cTtq:Htmafkb/FmETx+vk1ChVk/st3yq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c904b3eedec6f76fee603fc226daa20_NeikiAnalytics

Files

6c904b3eedec6f76fee603fc226daa20_NeikiAnalytics
.exe windows:1 windows x86 arch:x86

7ba5249fd96813b9a329de6056f2b8a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

c60olex

Cla$HookOle

c60runx

Cla$ADDqueue
Cla$ADDqueuekey
Cla$BEEP
Cla$CHOICE
Cla$CLEAR
Cla$CLEARqueue
Cla$clearstr
Cla$CLOSEwindow
Cla$code
Cla$comparestr
Cla$DecAdd
Cla$DecDistinct
Cla$DecDivide
Cla$DecMul
Cla$DecSub
Cla$DecSubR
Cla$DISPLAY
Cla$DISPOSEqueue
Cla$Dlongpower
Cla$DPopDec
Cla$DPopLong
Cla$DPushDec
Cla$DPushLong
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ERRORCODE
Cla$EVENT
Cla$FIELD
Cla$FileExists
Cla$FREEqueue
Cla$FREEqueuea
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GETPOSITION
Cla$GetPropS
Cla$GETqueuekey
Cla$GETqueueptr
Cla$init
Cla$KEYCODE
Cla$LASTFIELD
Cla$Mem2Ufo
Cla$MessageBox
Cla$NEWqueue
Cla$OPENwindow
Cla$PopBind
Cla$PopCString
Cla$PopString
Cla$PopTemp
Cla$POST
Cla$PushBind
Cla$PushCString
Cla$PushLong
Cla$PushString
Cla$PUTINI
Cla$PUTqueue
Cla$PUTqueuekey
Cla$pwopen
Cla$RECORDSqueue
Cla$REGISTEREVENT
Cla$RemoveFile
Cla$SELECT
Cla$SETCLIPBOARD
Cla$SETKEYCODE
Cla$SETPOSITION
Cla$SetPropS
Cla$SetPropV
Cla$SORTqueuekey
Cla$Stack2DStack
Cla$StackCLIP
Cla$StackCompareN
Cla$StackCompareNEQ
Cla$StackConcat
Cla$StackConcatR
Cla$StackINLIST
Cla$StackLen
Cla$StackRotate
Cla$StackSUB
Cla$StartEventLoop
Cla$storestr
Cla$THREAD
Cla$UNREGISTEREVENT
Cla$UPDATE
THR$GetInstance
Wsl$CloseDown
_exit
_free
_longjmp
_malloc
_setjmp
__sysinit
__sysstart

kernel32

OpenFile
_lclose
_llseek
_lwrite

user32

SetWindowPos
SystemParametersInfoA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cwtls
Size: 512B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ba5249fd96813b9a329de6056f2b8a0

Headers

File Characteristics

Imports

c60olex

c60runx

kernel32

user32

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 23KB - Virtual size: 28KB

.cwtls Size: 512B - Virtual size: 540B

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 261KB - Virtual size: 261KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 23KB - Virtual size: 28KB

.cwtls
Size: 512B - Virtual size: 540B

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 261KB - Virtual size: 261KB

.reloc
Size: 8KB - Virtual size: 8KB