4358acdd397d49aae7ae70defb2ff3c0_NeikiAnalytics

General

Target

4358acdd397d49aae7ae70defb2ff3c0_NeikiAnalytics
Size

113KB
MD5

4358acdd397d49aae7ae70defb2ff3c0
SHA1

6ec9b966cbb96d11e7e1c006a68d6529d73b7589
SHA256

55f40a88125c06efbaaece7ec30be0f1f06d079d4240771c73a60813ce7e8d39
SHA512

531c1930168e2846455c6794d3105a347b5fa250d48a202659dc6ba874da9bfc054a10529f8d349738f1497daec3de3ae66181d30b7946b3a945f59a82eb1286
SSDEEP

1536:8ZnXx2c3K02fElBmRKoYxwrSf2cb2Sd0c54x8oiW:8ZnXx2c3K0QElBloCf2cb2Sd0c4x8oiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4358acdd397d49aae7ae70defb2ff3c0_NeikiAnalytics

Files

4358acdd397d49aae7ae70defb2ff3c0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

1503a1a9bbd72e0b790df92dee49f710

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

f5ddfcb4

?sMarkPowerCobolMain@OFjCobCmpScr@@SGXXZ
?sLoadCobolCount@OFjCobCmpScr@@SGXXZ
?sUnloadCobolCount@OFjCobCmpScr@@SGXXZ
?sCanClearCobolRuntime@OFjCobCmpScr@@SGHXZ
XPOW_INVOKE_BY_ID_2

f5ddcy41

?sExeEntry@OCfModule@@SGKPAUHINSTANCE__@@PADHPAPAUICfModule@@PAX@Z

f3biprct

ord67
ord54
ord39
ord25
ord1
ord3
ord31
ord27
ord26

f3biio

ord22
ord38

kernel32

LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr

Exports

Exports

ACERTA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1503a1a9bbd72e0b790df92dee49f710

Headers

File Characteristics

Imports

f5ddfcb4

f5ddcy41

f3biprct

f3biio

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.rodata Size: 8KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB

.rodata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 20KB