697e6c37318a960d3ee858311962c010_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

697e6c37318a960d3ee858311962c010_NeikiAnalytics
Size

7.0MB
MD5

697e6c37318a960d3ee858311962c010
SHA1

31c60c71c98c6d0f1d4b4b1d8ebecb98c28b6e02
SHA256

1ccb9551382b0b17cf14cc9795a2b8c2b960431ed355d9ae6c9ca6d9127b5804
SHA512

57544fe94cef5951f14cee05f34ec9608f86a6164a4cb6af6e293a11fc2ce9372fb1688fd28d11bf2d7f530a69ddba00944dc8dc1ca47655298ee753605aaaed
SSDEEP

98304:qIyb6Q+yEnrhQ7aiFQzuz9WqBS4MN+5GxjupWPcYHeCkoTGfLy2dxLb+bCm/KpV8:JbByYBrwWqJDOypxYHeZoOnL0iVsUXS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697e6c37318a960d3ee858311962c010_NeikiAnalytics

Files

697e6c37318a960d3ee858311962c010_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

b203085e0f03b4013da5456390f2d423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetWindowTextW
CharUpperBuffW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

wtsapi32

WTSRegisterSessionNotification

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n0G
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GC7
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

UHFSDEW
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xyd
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.&/n
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESX
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b203085e0f03b4013da5456390f2d423

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

iphlpapi

wtsapi32

oleacc

gdi32

winspool.drv

oleaut32

Sections

.text Size: - Virtual size: 160KB

.rdata Size: - Virtual size: 40KB

.data Size: - Virtual size: 32KB

.n0G Size: - Virtual size: 232KB

.GC7 Size: - Virtual size: 32KB

UHFSDEW Size: - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.Xyd Size: - Virtual size: 3.8MB

.&/n Size: 2KB - Virtual size: 1KB

.ESX Size: 7.0MB - Virtual size: 7.0MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 47KB - Virtual size: 47KB

.text
Size: - Virtual size: 160KB

.rdata
Size: - Virtual size: 40KB

.data
Size: - Virtual size: 32KB

.n0G
Size: - Virtual size: 232KB

.GC7
Size: - Virtual size: 32KB

UHFSDEW
Size: - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.Xyd
Size: - Virtual size: 3.8MB

.&/n
Size: 2KB - Virtual size: 1KB

.ESX
Size: 7.0MB - Virtual size: 7.0MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 47KB - Virtual size: 47KB