518ef8cfbb4796c89152886d332218d0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

518ef8cfbb4796c89152886d332218d0_NeikiAnalytics
Size

56KB
MD5

518ef8cfbb4796c89152886d332218d0
SHA1

8ebd3406cb9cdc3dfd5fd8acde97cd4f8895d3a0
SHA256

1502d8118c3d97028d19d4de1ea9ab3fe0255424a4f31914a56d8eed34919c23
SHA512

29c4683beb256f6bfbc14859249a058aa3847cb5bd519c9700b8d773432f35747a3ae946cc391add4c11c1aa5dad7deae849e80444eeb4eac3213ace59e0c201
SSDEEP

768:9KATOUTqXsh7p6g7yumvjAde2wQ8cOXpj3eXH14f0GKQ6km0WIa6X9OnlFG9:vKOhDyuySe2wQ8cOX4X19e2FG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
518ef8cfbb4796c89152886d332218d0_NeikiAnalytics

Files

518ef8cfbb4796c89152886d332218d0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

86c9e133e2efb4059c7d30175966c403

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpython3.11

PyBool_FromLong
PyBuffer_Release
PyByteArray_Type
PyBytes_FromStringAndSize
PyCapsule_New
PyDescr_NewGetSet
PyDict_GetItemWithError
PyDict_New
PyDict_SetDefault
PyDict_SetItem
PyDict_SetItemString
PyErr_Format
PyErr_NewException
PyErr_NoMemory
PyErr_Occurred
PyErr_SetObject
PyErr_SetString
PyExc_RuntimeError
PyExc_TypeError
PyExc_ValueError
PyList_Append
PyList_New
PyLong_AsLong
PyLong_FromLong
PyMem_Free
PyMem_Malloc
PyModuleDef_Init
PyModule_AddIntConstant
PyModule_AddObject
PyModule_AddObjectRef
PyModule_AddStringConstant
PyModule_GetState
PyModule_New
PyObject_Call
PyObject_CallFunction
PyObject_CallOneArg
PyObject_Free
PyObject_GC_Del
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GetBuffer
PyObject_IsTrue
PyObject_Malloc
PyObject_Realloc
PyObject_SetAttrString
PyTuple_New
PyType_FromModuleAndSpec
PyType_GetModuleState
PyType_IsSubtype
PyUnicode_AsUTF8AndSize
PyUnicode_Decode
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromString
PyUnicode_InternFromString
Py_BuildValue
_PyArg_BadArgument
_PyArg_UnpackKeywords
_PyByteArray_empty_string
_PyImport_SetModule
_PyLong_AsInt
_PyObject_GC_New
_PyObject_LookupAttr
_PyTraceback_Add
_PyUnicode_Ready
_Py_Dealloc
_Py_HashSecret
_Py_NoneStruct

libexpat-1

XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetInputContext
XML_GetSpecifiedAttributeCount
XML_Parse
XML_ParseBuffer
XML_ParserCreate_MM
XML_ParserFree
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetHashSalt
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReparseDeferralEnabled
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
memcpy
realloc
strlen
strncmp
strrchr
vfprintf

Exports

Exports

PyInit_pyexpat

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 552B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86c9e133e2efb4059c7d30175966c403

Headers

DLL Characteristics

File Characteristics

Imports

libpython3.11

libexpat-1

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 9KB - Virtual size: 9KB

.eh_fram Size: 7KB - Virtual size: 6KB

.bss Size: - Virtual size: 552B

.edata Size: 512B - Virtual size: 94B

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 9KB - Virtual size: 9KB

.eh_fram
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 552B

.edata
Size: 512B - Virtual size: 94B

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 2KB - Virtual size: 1KB