713c2d31970b023b33cca2f51ecc1f70_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

713c2d31970b023b33cca2f51ecc1f70_NeikiAnalytics
Size

1.3MB
MD5

713c2d31970b023b33cca2f51ecc1f70
SHA1

3701e4ebf93d66d1d1464315446b1ad2ba9d6380
SHA256

d839a53801e4de09a329d924ece6fce99ffe355af1eaeabcdede10b3d8742f9f
SHA512

2d138fb4e670204a92dd2cade53141f2f1f24acd447fed65ed029e4c77cc64d3afe1b5f2c4519a8d9e5db3729996b245f3d7f829a2da79c689dadcd0f2f1dda4
SSDEEP

12288:q0SXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:q0SsqjnhMgeiCl7G0nehbGZpbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713c2d31970b023b33cca2f51ecc1f70_NeikiAnalytics

Files

713c2d31970b023b33cca2f51ecc1f70_NeikiAnalytics
.exe windows:6 windows x64 arch:x64

aa7b15c348aefd103622ababca4997d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\VMWD\Build\Bin.Win\Programs_VS141_64.fin\Add-ons\EnergyEvaluation\VIPconsole.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memset
__C_specific_handler
memmove
memcpy
memcmp
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
exit
_exit
_get_initial_narrow_environment
_configure_narrow_argv
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_crt_atexit
__p___argc
terminate

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
_set_new_mode
free

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-time-l1-1-0

_time64
strftime
_localtime64_s

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aa7b15c348aefd103622ababca4997d1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 424B

.pdata Size: 512B - Virtual size: 504B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 424B

.pdata
Size: 512B - Virtual size: 504B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1.3MB - Virtual size: 1.3MB