b862680eed816876cbbf6d789749b9c0_NeikiAnalytics

General

Target

b862680eed816876cbbf6d789749b9c0_NeikiAnalytics
Size

371KB
MD5

b862680eed816876cbbf6d789749b9c0
SHA1

e50365cc612d9a26af852810b11da3e1fa7e1132
SHA256

1c4e464efe068b09dd353d679264674699e64e047fbe425fba4256c54943bc06
SHA512

71c9dbffff6f97e31efc193811f2b5b318837b62fafd9ed241f94c7750ddce92f4898ea6c811cf06e7eca6abe4713f21de64d06f2ffe7793b42bd4992866c4bd
SSDEEP

3072:oicPyvMQEW/A9vw04CkqO/au5qTb7hYzsz259fwbBACXnL0xaMZuCFMXw:LEQEkAL4C3O/aukVaXMAsL0xaMZu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b862680eed816876cbbf6d789749b9c0_NeikiAnalytics

Files

b862680eed816876cbbf6d789749b9c0_NeikiAnalytics
.dll windows:1 windows x86 arch:x86

f8c20547cbab18ab8f0b1cfc3a5fec7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

loaders

load_coff
load_basic
load_cod
load_hex
load_ubrof

kernel32

GetTickCount
CloseHandle
FreeEnvironmentStringsA
GetVersion
GetEnvironmentStrings
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
WriteConsoleA
ExitProcess
MultiByteToWideChar
RtlUnwind
SetConsoleCtrlHandler
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
GetCurrentThreadId
GetLastError
WideCharToMultiByte
SetUnhandledExceptionFilter
RaiseException
LCMapStringA
FindFirstFileA
FindClose
DuplicateHandle
GetCurrentProcess
GetStdHandle
GetStringTypeA

user32

MessageBoxA

Exports

Exports

createmixedmodel
deletemixedmodel

Sections

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_TEXT
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT$XIA
Size: 219KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 28B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f8c20547cbab18ab8f0b1cfc3a5fec7f

Headers

File Characteristics

Imports

loaders

kernel32

user32

Exports

Exports

Sections

.edata Size: 512B - Virtual size: 512B

.idata Size: 1KB - Virtual size: 1KB

_TEXT Size: 103KB - Virtual size: 103KB

.CRT$XIA Size: 219KB - Virtual size: 244KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 44KB - Virtual size: 44KB

.debug Size: 28B - Virtual size: 512B

.edata
Size: 512B - Virtual size: 512B

.idata
Size: 1KB - Virtual size: 1KB

_TEXT
Size: 103KB - Virtual size: 103KB

.CRT$XIA
Size: 219KB - Virtual size: 244KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 44KB - Virtual size: 44KB

.debug
Size: 28B - Virtual size: 512B