5febaf7fc64dc95fd8c6d17d1da88ed0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

5febaf7fc64dc95fd8c6d17d1da88ed0_NeikiAnalytics
Size

99KB
MD5

5febaf7fc64dc95fd8c6d17d1da88ed0
SHA1

cf40c1b2e00c3cac1db843b604a50c2c4e5bfb7b
SHA256

9d464dae6816d84cc3097aa6f4c6a50dbecc95a92a005537fefeeb6bca417865
SHA512

a6378818c6a19a8b7ee82393b53819d04ca1846dc9c45a7de53dc0cc9b2e77cd2f465ef0ee45ef9e70d28027b5cf0a1248e4dba08b474e9c58aa27e185cbbf5d
SSDEEP

3072:31ISIJn36TlMEq0c0cpc4BwzaD/RqNzzDBn:31IJF6TlZI0cp9++DR0DB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5febaf7fc64dc95fd8c6d17d1da88ed0_NeikiAnalytics

Files

5febaf7fc64dc95fd8c6d17d1da88ed0_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

3bebc47ee454fc9fe6208f3b13c128a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

fl1710.exe

count2
nres
rp_unsteady
Get_Domain
rpgetvar
Lookup_Thread
CX_Message
ilength
fixnum_arg
flonum_arg
seem_err
RP_Get_String
RP_Get_Integer
RP_Get_Float

kernel32

GetEnvironmentStringsW
ReadConsoleW
ReadFile
SetEndOfFile
LCMapStringW
HeapSize
GetStringTypeW
CreateFileW
HeapAlloc
GetLastError
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
HeapFree
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WriteFile
GetModuleFileNameW
GetProcessHeap
SetLastError
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetFilePointerEx
WriteConsoleW

Exports

Exports

UDF_Inquire_Release
n_udf_data
udf_data

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bebc47ee454fc9fe6208f3b13c128a0

Headers

DLL Characteristics

File Characteristics

Imports

fl1710.exe

kernel32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 6KB - Virtual size: 18KB

.pdata Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 6KB - Virtual size: 18KB

.pdata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB