4b20834e2d2a47f5d7cb39bbd19e51e0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

4b20834e2d2a47f5d7cb39bbd19e51e0_NeikiAnalytics
Size

14KB
MD5

4b20834e2d2a47f5d7cb39bbd19e51e0
SHA1

a9a8a1650910b8a788afbd39da7d0d78aea6e95f
SHA256

11cf0667a6c6e4fbd2a096c647af99cba6e788b2f9aab3f4baf5c7e4ab0a8719
SHA512

cf9e1e64890e2de88aea79d1fa0ce5c437a8dc87b4f4ec30cff2eaaf4248d69491fa7b18ad6a4c47391bb7929bd60e0fa252c5469b758939ada7781d21dde465
SSDEEP

192:+2O5ieTpDwI/yd5SXTatV+BZPsrMgn0BVK2ZD5maHbej+dqo+Jz37:JTeTpUIKv6eX+/PsrMvCMKjD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b20834e2d2a47f5d7cb39bbd19e51e0_NeikiAnalytics

Files

4b20834e2d2a47f5d7cb39bbd19e51e0_NeikiAnalytics
.exe windows:6 windows x64 arch:x64

77952e5b5ba36e398ea7f82999c0274f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Z:\gr-build\src-stage3\staged_install\Release\share\gnuradio\modtool\gr-newmod\build\CMakeFiles\3.3.0\CompilerIdCXX\CompilerIdCXX.pdb

Imports

vcruntime140d

__C_specific_handler
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger

ucrtbased

terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
__p__commode
_set_new_mode
_configthreadlocale
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77952e5b5ba36e398ea7f82999c0274f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140d

ucrtbased

kernel32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 576B

.gfids Size: 512B - Virtual size: 28B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 68B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 576B

.gfids
Size: 512B - Virtual size: 28B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 68B