433553c3312a8ce026ef06e7fb96d0a0_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

433553c3312a8ce026ef06e7fb96d0a0_NeikiAnalytics
Size

169KB
MD5

433553c3312a8ce026ef06e7fb96d0a0
SHA1

436838b20d9f26cf7067d5f4aa693048fa4701bb
SHA256

54437c2442dc9918ac0430fa66541c4acbbc9f3f6e0bb3b8fd62fe8fbfbd2660
SHA512

501dafb0b0225b244e58011acfaffdf61e8fa2afa74fa3df9b1bdfd2f6a251d24307dfe47dccc5358ab71e8209e7d10f517c88953ac5d5f4ca060c23786780e0
SSDEEP

3072:AdOC9G33IJET7Nbauf3TtIK9tdBlnv5LiG4ZhP87JnNRUJzZVCvL:8Z9cba4TeotdnnvnGhPkJNSJ6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
433553c3312a8ce026ef06e7fb96d0a0_NeikiAnalytics

Files

433553c3312a8ce026ef06e7fb96d0a0_NeikiAnalytics
.exe windows:5 windows x64 arch:x64

f72e291821640b57ceb6bccde0b5c427

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\VC与VB6混合编程项目保存区\ToLogonSystem\x64\Release\ToLogonSystem.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoW
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetLastError
HeapFree
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

user32

UpdateWindow

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f72e291821640b57ceb6bccde0b5c427

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 89KB - Virtual size: 89KB

.rdata Size: 70KB - Virtual size: 70KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 448B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 89KB - Virtual size: 89KB

.rdata
Size: 70KB - Virtual size: 70KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 448B

.reloc
Size: 1KB - Virtual size: 1KB