54a0d73a5ffc2bdb783a6a6f39b03620_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

54a0d73a5ffc2bdb783a6a6f39b03620_NeikiAnalytics
Size

61KB
MD5

54a0d73a5ffc2bdb783a6a6f39b03620
SHA1

347d58dc5ba5e95e0dc004168ce7c2992905f351
SHA256

2d51e0d34cb7951dd2b99c412a85249708b3d09a625fb34b231691258cd5a51e
SHA512

207835c205c5777631fa8cb8c80834eb2a72fd2b8b326e5a5fa8120ff7df4ebed3aadbabfc40f0d03f39d4fae9962056d110b81ec81d9c3a88c6ad13fa1f5018
SSDEEP

1536:j5pgxyBEOleLNZoP3YybNHGqgaRHKVwnJ4FCEealxMq7m:j5sGleZEBGqgaRqKnJ4UclxM1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54a0d73a5ffc2bdb783a6a6f39b03620_NeikiAnalytics

Files

54a0d73a5ffc2bdb783a6a6f39b03620_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

b87f5fc00b671ab030fefd2138cc2dc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_errno
_iob
_winmajor
abort
acos
asin
atof
atoi
calloc
cos
exp
fflush
free
fwrite
log
log10
malloc
memcpy
memmove
realloc
sin
sprintf
sqrt
strchr
strcpy
vfprintf

agena

luaL_checkudata
luaL_error
luaL_newmetatable
luaL_optinteger
luaL_register
lua_getfield
lua_newuserdata
lua_pushboolean
lua_pushinteger
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushvalue
lua_replace
lua_setfield
lua_setmetatable
lua_settable
lua_settop
lua_toboolean
lua_tolstring
lua_tonumber
lua_type

Exports

Exports

MM_0_5
MM_0_85
MM_2_PI
MM_5x_125R
MM_5x_256R
MM_5x_64R
MM_5x_Eight
MM_5x_Sixteen
MM_5x_Twenty
MM_E
MM_Five
MM_Four
MM_HALF_PI
MM_LOG_10_BASE_E
MM_LOG_2_BASE_E
MM_LOG_3_BASE_E
MM_LOG_E_BASE_10
MM_One
MM_PI
MM_Ten
MM_Three
MM_Two
MM_Zero
MM_cpp_min_precision
MM_lc_2_PI
MM_lc_HALF_PI
MM_lc_PI
MM_lc_PI_digits
MM_lc_log10
MM_lc_log10R
MM_lc_log2
MM_lc_log_digits
M_4x_cos
M_4x_do_it
M_5x_do_it
M_5x_sin
M_apm_log_error_msg
M_apm_normalize
M_apm_pad
M_apm_round_fixpt
M_apm_scale
M_apm_sdivide
M_arccos_near_0
M_arcsin_near_0
M_arctan_large_input
M_arctan_near_0
M_bitrv2
M_calculate_PI_AGM
M_cft1st
M_cftbsub
M_cftfsub
M_cftmdl
M_check_PI_places
M_check_log_places
M_cos_to_sin
M_exp_compute_nn
M_fast_mul_fft
M_fast_multiply
M_fmul_add
M_fmul_div_conq
M_fmul_split
M_fmul_subtract
M_free_all_add
M_free_all_cnst
M_free_all_div
M_free_all_exp
M_free_all_fft
M_free_all_fmul
M_free_all_pow
M_free_all_set
M_free_all_stck
M_free_all_util
M_get_acos_guess
M_get_asin_guess
M_get_cbrt_guess
M_get_div_rem
M_get_div_rem_10
M_get_div_rem_addr
M_get_log_guess
M_get_sizeof_int
M_get_sqrt_guess
M_get_stack_ptr
M_get_stack_var
M_init_trig_globals
M_init_util_data
M_limit_angle_to_pi
M_log_AGM_R_func
M_log_basic_iteration
M_log_near_1
M_log_solve_cubic
M_long_2_ascii
M_lowercase
M_next_power_of_2
M_pop_mul_int
M_push_mul_int
M_raw_cos
M_raw_exp
M_raw_sin
M_rdft
M_restore_stack
M_rftbsub
M_rftfsub
M_set_to_zero
M_strposition
luaopen_mapm
m_apm_absolute_value
m_apm_add
m_apm_arccos
m_apm_arccosh
m_apm_arcsin
m_apm_arcsinh
m_apm_arctan
m_apm_arctan2
m_apm_arctanh
m_apm_cbrt
m_apm_ceil
m_apm_compare
m_apm_copy
m_apm_cos
m_apm_cosh
m_apm_cpp_precision
m_apm_divide
m_apm_exp
m_apm_exponent
m_apm_factorial
m_apm_floor
m_apm_free
m_apm_init
m_apm_integer_div_rem
m_apm_integer_divide
m_apm_integer_pow
m_apm_is_even
m_apm_is_integer
m_apm_is_odd
m_apm_lib_short_version
m_apm_lib_version
m_apm_log
m_apm_log10
m_apm_multiply
m_apm_negate
m_apm_pow
m_apm_reciprocal
m_apm_round
m_apm_set_double
m_apm_set_long
m_apm_set_string
m_apm_sign
m_apm_significant_digits
m_apm_sin
m_apm_sin_cos
m_apm_sinh
m_apm_sqrt
m_apm_subtract
m_apm_tan
m_apm_tanh
m_apm_to_fixpt_string
m_apm_to_fixpt_stringex
m_apm_to_fixpt_stringexp
m_apm_to_integer_string
m_apm_to_string

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b87f5fc00b671ab030fefd2138cc2dc2

Headers

File Characteristics

Imports

kernel32

msvcrt

agena

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.data Size: 1024B - Virtual size: 1016B

.rdata Size: 3KB - Virtual size: 2KB

.eh_fram Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 2KB

.edata Size: 4KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 46KB - Virtual size: 46KB

.data
Size: 1024B - Virtual size: 1016B

.rdata
Size: 3KB - Virtual size: 2KB

.eh_fram
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 2KB

.edata
Size: 4KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 2KB - Virtual size: 2KB