82b2a61b2a0e1fd933f18713a1e51720_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

82b2a61b2a0e1fd933f18713a1e51720_NeikiAnalytics
Size

80KB
MD5

82b2a61b2a0e1fd933f18713a1e51720
SHA1

5ab12c33f1803b466fdb5c6eb68ee35d4a241e91
SHA256

c964d993d39cc057a058443ced3b519cd101e70ba78b8edb6787e72301a43cfa
SHA512

07720e9b158f077b33d0cff696b2889a613eed9bf92fbe22c251187002a0a43720e16f52f8f92075ed206f1c2784d9ce7406339c5f31fc533076be08c074b316
SSDEEP

1536:ikr+dwtR0TJuUpTiesoVHh4DHbHHHBHK0:ikr+KtRE4esoVHh4DHbHHHBHK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82b2a61b2a0e1fd933f18713a1e51720_NeikiAnalytics

Files

82b2a61b2a0e1fd933f18713a1e51720_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

5c8091407afbe6b2aad284176ae5bb37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
FreeResource
LockResource
LoadResource
FindResourceA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
lstrlenA
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

AnsiChangeLayout
AnsiCompare
AnsiReverse
AnsiToLower
AnsiToUnicode
AnsiToUpper
BiAnsiToOem
BiAnsiToOemBuff
BiOemToAnsi
BiOemToAnsiBuff
IsAnsiAlpha
IsAnsiAlphaNumeric
IsAnsiLower
IsAnsiRussian
IsAnsiRussianBuff
IsAnsiUpper
IsNumeric
IsOemAlpha
IsOemAlphaNumeric
IsOemLower
IsOemUpper
OemCompare
OemReverse
OemToLower
OemToUpper
StrAnsiChangeLayout
StrAnsiChangeLayoutBuff
StrAnsiCompare
StrAnsiCompareBuff
StrAnsiLower
StrAnsiLowerBuff
StrAnsiReverse
StrAnsiReverseBuff
StrAnsiToOem
StrAnsiToOemBuff
StrAnsiToUnicode
StrAnsiToUnicodeBuff
StrAnsiToUnicodeBuff2
StrAnsiUpper
StrAnsiUpperBuff
StrOemCompare
StrOemCompareBuff
StrOemLower
StrOemLowerBuff
StrOemReverse
StrOemReverseBuff
StrOemToAnsi
StrOemToAnsiBuff
StrOemUpper
StrOemUpperBuff
StrUnicodeToAnsi
StrUnicodeToAnsiBuff
StrUnicodeToAnsiBuff2
UnicodeToAnsi

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c8091407afbe6b2aad284176ae5bb37

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 31KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 31KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 4KB - Virtual size: 3KB