9acb1d4f1b78b39b0ee8c98985682090_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

9acb1d4f1b78b39b0ee8c98985682090_NeikiAnalytics
Size

328KB
MD5

9acb1d4f1b78b39b0ee8c98985682090
SHA1

f28db1bc6f3c5ac27b5a3c36772aa03248e67f70
SHA256

c7c4ac86877db821ccbbc49d81a5471a1e44edc8b31aab97291c4660a8514d6e
SHA512

710fa6e0910938c2a1b85774de296474f4f7ccf04b800d618966021eabf88d854b87faddf349f37b83d13fee96ed6960a669ce4c3a1331d27eaec7c45759f46b
SSDEEP

3072:FUhLh+s6ucc6e8dg85Dy73O5ihQawDaEb/qZB9vWyEekiAmlDxU/eopgNvZEPguY:IYshc+G9y7+0xMb6SyEekFixEPd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9acb1d4f1b78b39b0ee8c98985682090_NeikiAnalytics

Files

9acb1d4f1b78b39b0ee8c98985682090_NeikiAnalytics
.exe windows:6 windows x64 arch:x64

bbb484e19ac3f8baaeac2c29b7f70a65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\MAA\VC\MaaSoftware\RRSvcHlp\x64\Release\RRSvcHlp64.pdb

Imports

user32

MessageBoxW

advapi32

RegSetValueExW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ChangeServiceConfig2W
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
StartServiceW
RegCreateKeyExW

iphlpapi

IpReleaseAddress
GetInterfaceInfo
IpRenewAddress

kernel32

GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetStringTypeW
GetFileSizeEx
GetConsoleMode
GetTimeZoneInformation
LCMapStringW
CompareStringW
HeapAlloc
HeapFree
GetConsoleCP
ExitProcess
GetCommandLineW
GetLastError
Sleep
GetStdHandle
SetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FlushFileBuffers
GetFileAttributesW
GetFileAttributesExW
ReadFile
ReadConsoleW
SetFilePointerEx
SetFileTime
WriteFile
CloseHandle
WaitForSingleObject
CreateEventW
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetModuleFileNameW
ReleaseMutex
CreateMutexW
IsBadReadPtr
IsBadStringPtrA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
LocalFree
FormatMessageW
QueryPerformanceCounter
RaiseException
ResetEvent
CreateSemaphoreW
GetModuleHandleW
GetProcAddress
SetLastError
GetCurrentProcess
TerminateProcess
GetProcessAffinityMask
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
GetFileType
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
SetEvent
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
FindClose
FindFirstFileExW
FindNextFileW
GetModuleHandleExW

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbb484e19ac3f8baaeac2c29b7f70a65

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

advapi32

iphlpapi

kernel32

Sections

.text Size: 166KB - Virtual size: 165KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 6KB - Virtual size: 13KB

.pdata Size: 8KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 256B

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 166KB - Virtual size: 165KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 6KB - Virtual size: 13KB

.pdata
Size: 8KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 256B

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 2KB - Virtual size: 2KB