ae9d793e7fe7854c5467ecd575f8e7b0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

ae9d793e7fe7854c5467ecd575f8e7b0_NeikiAnalytics
Size

1.2MB
MD5

ae9d793e7fe7854c5467ecd575f8e7b0
SHA1

37e532b151a1700fcc7f4e14f126dd9ee6f76cb8
SHA256

737123ad1db4e021e2c09a996a55dd2844c59d9e74f057f08597a4fe14a637e8
SHA512

25ca0e9875792376b2a37565b3c7fbee0b0d3a28c02fe07b336a01ff31c03b1f549352b2105037b5d01c4a5fb5f768c7938e3e7af5c32f8a1bf2c9eade49a07f
SSDEEP

12288:1QORjNOKXtUK2WIpb0yGSxhqwizmy7jUxyi:1zjNDXtU1WuwyGSrxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae9d793e7fe7854c5467ecd575f8e7b0_NeikiAnalytics

Files

ae9d793e7fe7854c5467ecd575f8e7b0_NeikiAnalytics
.exe windows:4 windows x64 arch:x64

9bbb39768ccc530d48d4e3bb7803f8b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

Imports

libopenfoam

_ZN4Foam10FatalErrorE
_ZN4Foam10SLListBase10removeHeadEv
_ZN4Foam10SLListBase9push_backEPNS0_4linkE
_ZN4Foam10readDoubleEPKc
_ZN4Foam10readScalarERNS_7IstreamE
_ZN4Foam11regIOobjectD2Ev
_ZN4Foam12readHexLabelERNS_8ISstreamE
_ZN4Foam13HashTableCore12maxTableSizeE
_ZN4Foam13HashTableCore13canonicalSizeEi
_ZN4Foam13messageStream6streamEPNS_8OSstreamE
_ZN4Foam13messageStreamclEPKcS2_i
_ZN4Foam13wallPolyPatch8typeNameE
_ZN4Foam14emptyPolyPatch8typeNameE
_ZN4Foam17symmetryPolyPatch8typeNameE
_ZN4Foam4InfoE
_ZN4Foam4Time15controlDictNameE
_ZN4Foam4TimeC1ERKNS_4wordERKNS_7argListES3_S3_bbNS_14IOobjectOption10readOptionE
_ZN4Foam4TimeD1Ev
_ZN4Foam4face7compareERKS0_S2_
_ZN4Foam4word5debugE
_ZN4Foam5error4exitEi
_ZN4Foam5error5abortEv
_ZN4Foam5errorclEPKcS2_i
_ZN4Foam6HasherEPKvyj
_ZN4Foam6string14removeRepeatedEc
_ZN4Foam6string9removeEndEc
_ZN4Foam7WarningE
_ZN4Foam7argList10noParallelEv
_ZN4Foam7argList11addArgumentERKNS_6stringES3_
_ZN4Foam7argList13addBoolOptionERKNS_4wordERKNS_6stringEb
_ZN4Foam7argList13argsMandatoryEv
_ZN4Foam7argList7addNoteERKNS_6stringE
_ZN4Foam7argList9addOptionERKNS_4wordERKNS_6stringES6_b
_ZN4Foam7argListC1ERiRPPcbbb
_ZN4Foam7argListD1Ev
_ZN4Foam8IOobjectC1ERKNS_4wordERKNS_8fileNameERKNS_14objectRegistryENS_14IOobjectOptionE
_ZN4Foam8IOstream10precision_E
_ZN4Foam8ISstream4readERi
_ZN4Foam8OFstreamC1ENS_14IOstreamOption10atomicTypeERKNS_8fileNameES1_NS1_10appendTypeE
_ZN4Foam8OFstreamD1Ev
_ZN4Foam8OSstream4endlEv
_ZN4Foam8boundBoxC1ERKNS_5UListINS_6VectorIdEEEEb
_ZN4Foam8cellZoneC1ERKNS_4wordERKNS_5UListIiEEiRKNS_8ZoneMeshIS0_NS_8polyMeshEEE
_ZN4Foam8faceZoneC1ERKNS_4wordERKNS_5UListIiEEbiRKNS_8ZoneMeshIS0_NS_8polyMeshEEE
_ZN4Foam8fileName20allowSpaceInFileNameE
_ZN4Foam8fileName5debugE
_ZN4Foam8fileName8validateERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEb
_ZN4Foam8polyMesh10meshSubDirE
_ZN4Foam8polyMesh11setInstanceERKNS_8fileNameENS_14IOobjectOption11writeOptionE
_ZN4Foam8polyMesh13defaultRegionE
_ZN4Foam8polyMesh8addZonesERKNS_4ListIPNS_9pointZoneEEERKNS1_IPNS_8faceZoneEEERKNS1_IPNS_8cellZoneEEE
_ZN4Foam8polyMeshC1ERKNS_8IOobjectEONS_5FieldINS_6VectorIdEEEERKNS_4ListINS_9cellShapeEEERKNS9_INS9_INS_4faceEEEEERKNS9_INS_4wordEEESM_RKSJ_SO_SM_b
_ZN4Foam8polyMeshD1Ev
_ZN4Foam9cellModel3ptrENS0_9modelTypeE
_ZN4Foam9polyPatch3NewERKNS_4wordES3_iiiRKNS_16polyBoundaryMeshE
_ZN4Foam9polyPatch8typeNameE
_ZN4Foam9readInt32ERNS_7IstreamE
_ZN4FoamdvERKNS_6stringES2_
_ZN4FoamlsERNS_7OstreamEPKc
_ZN4FoamlsERNS_7OstreamERKNS_4wordE
_ZN4FoamlsERNS_7OstreamERKNS_5token16punctuationTokenE
_ZN4FoamlsERNS_7OstreamERKNS_8fileNameE
_ZN4FoamlsERNS_7OstreamEc
_ZN4FoamlsERNS_7OstreamEd
_ZN4FoamlsERNS_7OstreamEi
_ZN4FoamrsERNS_7IstreamERNS_4wordE
_ZNK4Foam11regIOobject5writeEb
_ZNK4Foam13primitiveMesh10pointFacesEv
_ZNK4Foam7argList5checkEbb
_ZNK4Foam8IOstream4nameEv
_ZNK4Foam8IOstream5checkEPKc
_ZNK4Foam8IOstream5printERNS_7OstreamE
_ZNK4Foam8polyMesh11removeFilesEv
_ZNK4Foam8polyMesh13faceNeighbourEv
_ZNK4Foam8polyMesh7meshDirEv
_ZNK4Foam8polyMesh9faceOwnerEv
_ZNK4Foam9polyPatch9faceCellsEv
_ZTVN4Foam13IStringStreamE
_ZTVN4Foam8IOobjectE
_ZTVN4Foam8ISstreamE
_ZThn360_NK4Foam8polyMesh5facesEv

libdynamicmesh

_ZN4Foam22repatchPolyTopoChanger13changePatchIDEii
_ZN4Foam22repatchPolyTopoChanger13changePatchesERKNS_4ListIPNS_9polyPatchEEE
_ZN4Foam22repatchPolyTopoChanger7repatchEv
_ZN4Foam22repatchPolyTopoChangerC1ERNS_8polyMeshE

libmeshtools

_ZN4Foam7cellSetC1ERKNS_8polyMeshERKNS_4wordEiNS_14IOobjectOption11writeOptionE
_ZN4Foam7faceSetC1ERKNS_8polyMeshERKNS_4wordEiNS_14IOobjectOption11writeOptionE
_ZTVN4Foam7topoSetE

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_filelengthi64
_fileno
_fmode
_fstat64
_initterm
_lseeki64
_onexit
_strnicmp
_wfopen
abort
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
_write
_read
_fileno
_fdopen

libwinpthread-1

pthread_cond_broadcast
pthread_cond_wait
pthread_getspecific
pthread_key_create
pthread_key_delete
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_once
pthread_setspecific

Sections

.text
Size: 807KB - Virtual size: 807KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9bbb39768ccc530d48d4e3bb7803f8b8

Headers

File Characteristics

PDB Paths

Imports

libopenfoam

libdynamicmesh

libmeshtools

kernel32

msvcrt

libwinpthread-1

Sections

.text Size: 807KB - Virtual size: 807KB

.data Size: 12KB - Virtual size: 11KB

.rdata Size: 243KB - Virtual size: 243KB

.buildid Size: 512B - Virtual size: 53B

.pdata Size: 46KB - Virtual size: 45KB

.xdata Size: 67KB - Virtual size: 67KB

.bss Size: - Virtual size: 5KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.text
Size: 807KB - Virtual size: 807KB

.data
Size: 12KB - Virtual size: 11KB

.rdata
Size: 243KB - Virtual size: 243KB

.buildid
Size: 512B - Virtual size: 53B

.pdata
Size: 46KB - Virtual size: 45KB

.xdata
Size: 67KB - Virtual size: 67KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B