3a19189c2bbf3e19bc61dfa9344a86e0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

3a19189c2bbf3e19bc61dfa9344a86e0_NeikiAnalytics
Size

163KB
MD5

3a19189c2bbf3e19bc61dfa9344a86e0
SHA1

ba666ba8780e9936b384f00e13cfea97589c477f
SHA256

38a2b8fd34f7cc0597fd941d764ee37e40700eb128d3f85ac6976b940aa2c120
SHA512

2718fcd34d8a29bb2f6684eabb81440eed85a5b6770e63bc10192974796f6cc6316d29f2e2a9a181cf7445385b40f14280e61bbc244bc2b48892e24e7ece1758
SSDEEP

3072:BDFFgjIDws9tDyN+8yOLlVuBIlhmvd4Yrt+4+a9ZVHj:DGGtD++Udm14i4ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a19189c2bbf3e19bc61dfa9344a86e0_NeikiAnalytics

Files

3a19189c2bbf3e19bc61dfa9344a86e0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

e56f7b957c049e132c12a67b4ba2b4cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
fread
free
fwrite
malloc
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf

Exports

Exports

LZ4F_compressBegin
LZ4F_compressBound
LZ4F_compressEnd
LZ4F_compressFrame
LZ4F_compressFrameBound
LZ4F_compressUpdate
LZ4F_compressionLevel_max
LZ4F_createCompressionContext
LZ4F_createDecompressionContext
LZ4F_decompress
LZ4F_flush
LZ4F_freeCompressionContext
LZ4F_freeDecompressionContext
LZ4F_getErrorName
LZ4F_getFrameInfo
LZ4F_getVersion
LZ4F_headerSize
LZ4F_isError
LZ4F_resetDecompressionContext
LZ4_compress
LZ4_compressBound
LZ4_compressHC
LZ4_compressHC2
LZ4_compressHC2_continue
LZ4_compressHC2_limitedOutput
LZ4_compressHC2_limitedOutput_continue
LZ4_compressHC2_limitedOutput_withStateHC
LZ4_compressHC2_withStateHC
LZ4_compressHC_continue
LZ4_compressHC_limitedOutput
LZ4_compressHC_limitedOutput_continue
LZ4_compressHC_limitedOutput_withStateHC
LZ4_compressHC_withStateHC
LZ4_compress_HC
LZ4_compress_HC_continue
LZ4_compress_HC_continue_destSize
LZ4_compress_HC_destSize
LZ4_compress_HC_extStateHC
LZ4_compress_continue
LZ4_compress_default
LZ4_compress_destSize
LZ4_compress_fast
LZ4_compress_fast_continue
LZ4_compress_fast_extState
LZ4_compress_limitedOutput
LZ4_compress_limitedOutput_continue
LZ4_compress_limitedOutput_withState
LZ4_compress_withState
LZ4_create
LZ4_createHC
LZ4_createStream
LZ4_createStreamDecode
LZ4_createStreamHC
LZ4_decoderRingBufferSize
LZ4_decompress_fast
LZ4_decompress_fast_continue
LZ4_decompress_fast_usingDict
LZ4_decompress_fast_withPrefix64k
LZ4_decompress_safe
LZ4_decompress_safe_continue
LZ4_decompress_safe_partial
LZ4_decompress_safe_partial_usingDict
LZ4_decompress_safe_usingDict
LZ4_decompress_safe_withPrefix64k
LZ4_freeHC
LZ4_freeStream
LZ4_freeStreamDecode
LZ4_freeStreamHC
LZ4_initStream
LZ4_initStreamHC
LZ4_loadDict
LZ4_loadDictHC
LZ4_resetStream
LZ4_resetStreamHC
LZ4_resetStreamHC_fast
LZ4_resetStreamState
LZ4_resetStreamStateHC
LZ4_resetStream_fast
LZ4_saveDict
LZ4_saveDictHC
LZ4_setStreamDecode
LZ4_sizeofState
LZ4_sizeofStateHC
LZ4_sizeofStreamState
LZ4_sizeofStreamStateHC
LZ4_slideInputBuffer
LZ4_slideInputBufferHC
LZ4_uncompress
LZ4_uncompress_unknownOutputSize
LZ4_versionNumber
LZ4_versionString

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e56f7b957c049e132c12a67b4ba2b4cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 141KB - Virtual size: 140KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 4KB - Virtual size: 3KB

.eh_fram Size: 10KB - Virtual size: 9KB

.bss Size: - Virtual size: 140B

.edata Size: 3KB - Virtual size: 2KB

.idata Size: 1024B - Virtual size: 896B

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 1024B - Virtual size: 1004B

.text
Size: 141KB - Virtual size: 140KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 4KB - Virtual size: 3KB

.eh_fram
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 140B

.edata
Size: 3KB - Virtual size: 2KB

.idata
Size: 1024B - Virtual size: 896B

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 1024B - Virtual size: 1004B