4b17c1ecada19178ffc65b25cba03e50_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

4b17c1ecada19178ffc65b25cba03e50_NeikiAnalytics
Size

282KB
MD5

4b17c1ecada19178ffc65b25cba03e50
SHA1

3f7194271a3d3910dcbbb9cbb01c82f5a2aacc59
SHA256

ec9d87b970e7fdeda0d8eac0fd563a4093a5bbdbc87f5ba1a6f9f3d8d05c1b92
SHA512

f37e05329251ca05f6d6241d06fe0e445b010ced86edf1606a0c40b985b8047b62970d05fde89be3c19534ac721df6a5d8b049c45fc3e571b7820fdec7f70a57
SSDEEP

6144:sh7gn4SFHZJoWr9TfPIdBb2VOXqw0PAjb+o:stgnZHZJBWdoYPsAPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b17c1ecada19178ffc65b25cba03e50_NeikiAnalytics

Files

4b17c1ecada19178ffc65b25cba03e50_NeikiAnalytics
.exe windows:1 windows x86 arch:x86

d9c7c23c3ceadf5772765684774044a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

c5runx

Cla$ACCEPTED
Cla$ADDqueue
Cla$ADDqueueptr
Cla$BEEP
Cla$BindG
Cla$BindV
Cla$CHOICE
Cla$CLEAR
Cla$clearstr
Cla$ClearType
Cla$CLOCK
Cla$CLOSEwindow
Cla$code
Cla$COMMIT
Cla$comparestr
Cla$DAY
Cla$DecAdd
Cla$DecDistinct
Cla$DecDistinctR
Cla$DecDivide
Cla$DecMul
Cla$DecSub
Cla$DecSubR
Cla$DELETEqueue
Cla$DInt
Cla$DISABLE
Cla$DISPLAY
Cla$DISPOSEqueue
Cla$DPopDec
Cla$DPopLong
Cla$DPopUlong
Cla$DPushDec
Cla$DPushLong
Cla$DStack2Stack
Cla$duplicate
Cla$ENABLE
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ERRCODE
Cla$EVENT
Cla$FIELD
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FILE_ADDf
Cla$FILE_BUILDf
Cla$FILE_CLOSE
Cla$FILE_CREATE
Cla$FILE_DELETE
Cla$FILE_DUPLICATEk
Cla$FILE_FLUSH
Cla$FILE_GETfk
Cla$FILE_GETfl
Cla$FILE_NAME
Cla$FILE_NEXT
Cla$FILE_OPEN
Cla$FILE_POSITIONf
Cla$FILE_POSITIONk
Cla$FILE_PREV
Cla$FILE_PUTf
Cla$FILE_REGETf
Cla$FILE_REGETk
Cla$FILE_RESETf
Cla$FILE_RESETk
Cla$FILE_SEND
Cla$FILE_SETf
Cla$FILE_SETk
Cla$FILE_SETkk
Cla$FILE_SET_PROPERTY
Cla$FILE_STREAM
Cla$FILE_WATCH
Cla$FIRSTFIELD
Cla$FOCUS
Cla$FREEqueue
Cla$FREEqueuea
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GETPOSITION
Cla$GetPropS
Cla$GETqueueptr
Cla$Group2Ufo
Cla$HALT
Cla$HIDE
Cla$init
Cla$IsAlpha
Cla$IsUpper
Cla$KEYCHAR
Cla$KEYCODE
Cla$LASTFIELD
Cla$LOGOUT
Cla$Mem2Ufo
Cla$MessageBox
Cla$MONTH
Cla$NEWqueue
Cla$OPENwindow
Cla$PopBind
Cla$PopCString
Cla$PopString
Cla$PopTemp
Cla$POPUP
Cla$POST
Cla$PRESSKEY
Cla$PushBind2
Cla$PushCString
Cla$PushLong
Cla$PushPictDec
Cla$PushString
Cla$pwopen
Cla$RANDOM
Cla$RECORDSqueue
Cla$ROLLBACK
Cla$SELECT
Cla$SETCURSOR
Cla$SETKEYCODE
Cla$SETPOSITION
Cla$SetPropS
Cla$SetPropV
Cla$SORTqueuekey
Cla$Stack2DStack
Cla$StackALL
Cla$StackCLIP
Cla$StackCompare
Cla$StackCompareN
Cla$StackCompareR
Cla$StackConcat
Cla$StackConcatR
Cla$StackErrstr
Cla$StackHeap
Cla$StackINSTRING
Cla$StackLen
Cla$StackLOWER
Cla$STACKpop
Cla$StackRotate
Cla$StackSUB
Cla$StackUPPER
Cla$StartEventLoop
Cla$storecstr
Cla$storestr
Cla$TODAY
Cla$UNHIDE
Cla$UPDATE
Cla$YEAR
VIEWDRIVER
Wsl$CloseDown
_exit
_free
_longjmp
_malloc
_setjmp
__checkversion
__sysinit

c5tpsx

TOPSPEED

cw5fm232

ds_AddDriver
ds_IgnoreDriver
ds_UpGradeFile
ds_UsingFile

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9c7c23c3ceadf5772765684774044a9

Headers

File Characteristics

Imports

c5runx

c5tpsx

cw5fm232

Sections

.text Size: 73KB - Virtual size: 72KB

.bss Size: - Virtual size: 5KB

.data Size: 15KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 179KB - Virtual size: 178KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 73KB - Virtual size: 72KB

.bss
Size: - Virtual size: 5KB

.data
Size: 15KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 179KB - Virtual size: 178KB

.reloc
Size: 9KB - Virtual size: 9KB