68306e734386edf352690706c7caf620_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

68306e734386edf352690706c7caf620_NeikiAnalytics
Size

1.8MB
MD5

68306e734386edf352690706c7caf620
SHA1

260ba989a99dc26c1bdbd915e00efc492b65640c
SHA256

fa343c294822c4efffd899b3d61b6d521ac2c3cf3817e02b703b60eedd7c734e
SHA512

47295da7bcc29097cbb5dc8e8ea2a4b2bb7ecc9fedf6759e39c84cdeb905921f42fb54ba8398e0f692c262b3eed9e83bf2e01d70cca047ac2a30a3213c77bf88
SSDEEP

24576:9fYhgzRF1w5gpWJFDV41ptU6HhPbYywtOxjScCAozJi0TMy8N8KVtLM6:JJCgkchUywtOIZAowjLM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68306e734386edf352690706c7caf620_NeikiAnalytics

Files

68306e734386edf352690706c7caf620_NeikiAnalytics
.exe windows:6 windows x64 arch:x64

84148c918ba41112b3cfb4c4ee928adf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenEventA
GetCurrentProcessId
ResetEvent
GetProcessHeap
HeapAlloc
HeapFree
GetStdHandle
Sleep
GetCurrentProcess
GetModuleFileNameA
GetConsoleMode
SwitchToThread
MultiByteToWideChar
WideCharToMultiByte
GetCurrentDirectoryW
CreateFileW
GetFileAttributesW
SetEndOfFile
SetFilePointerEx
GetLastError
DeviceIoControl
GetModuleHandleA
GetProcAddress
AreFileApisANSI
LCMapStringW
GetUserDefaultLCID
LocalFree
FormatMessageA
GetSystemTimeAsFileTime
ReleaseSemaphore
GetCurrentThreadId
SetEvent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsProcessorFeaturePresent
GetCommandLineA
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
HeapReAlloc
GetCPInfo
LoadLibraryExW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetStartupInfoW
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
CompareStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
HeapSize
GetFileType
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
FlushFileBuffers
GetConsoleCP
ReadFile
GetTimeZoneInformation
ReadConsoleW
OutputDebugStringW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
WaitForSingleObjectEx
CloseHandle
CreateEventA

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84148c918ba41112b3cfb4c4ee928adf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 568KB - Virtual size: 567KB

.data Size: 161KB - Virtual size: 183KB

.pdata Size: 50KB - Virtual size: 49KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 568KB - Virtual size: 567KB

.data
Size: 161KB - Virtual size: 183KB

.pdata
Size: 50KB - Virtual size: 49KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 8KB - Virtual size: 7KB