4075fc9386b1670562bcb50395f3fd50_NeikiAnalytics

General

Target

4075fc9386b1670562bcb50395f3fd50_NeikiAnalytics
Size

2.8MB
MD5

4075fc9386b1670562bcb50395f3fd50
SHA1

07499049e9cd2ed9efe22e02b93ede07436efa8b
SHA256

734fd2f580bb96f238a188459a1702f85b70e1e9d2a4ec6dd75354a987ebf98a
SHA512

9977f70f6732512ac834ea890fea5da321803d89f1ef52da41466d4e4e13960016f7b64adc67a5cb871f90d61d80135d36937fd70b1feb9012a4bb9d99d248f2
SSDEEP

49152:a6TUmtPpVMPV7mHkuW1CZueLAEw/r6pGwdc9dDkicTm9KU2oKntM8UljFCZueLAG:OmrV276Wt35GpGbdDkiWm9KU25n5Ul9W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4075fc9386b1670562bcb50395f3fd50_NeikiAnalytics

Files

4075fc9386b1670562bcb50395f3fd50_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

6af6a3acc4eec385b3aef56e6be8b3f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
CreateFileW
WideCharToMultiByte
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetProcessHeap
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6af6a3acc4eec385b3aef56e6be8b3f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 181KB - Virtual size: 180KB

.rdata Size: 66KB - Virtual size: 66KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.text
Size: 181KB - Virtual size: 180KB

.rdata
Size: 66KB - Virtual size: 66KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB