99ea5eb7fbd3726a145df0d793b5c4f0_NeikiAnalytics

General

Target

99ea5eb7fbd3726a145df0d793b5c4f0_NeikiAnalytics
Size

10KB
MD5

99ea5eb7fbd3726a145df0d793b5c4f0
SHA1

2dc5bf28b9f5332da8737ce31f9ecee8a7c56bd3
SHA256

a5686e7f14bcb8aaca22083da10b3127724065621f0a8c33d80d00bfe143c9ea
SHA512

416e9f605a965b800488f899cf6ae762f95ba11588895349f1f1e0c35faed261793f6c2d720cf5cb2491bdd8861b2433f7efd9f1b3d0a6be32cb261688998447
SSDEEP

192:cfBjHAjKHekG/Lk43u43/hgY0Tkzr3VW6wQwuZ:cfpHAjkbGg493/hgY0AH3VJwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99ea5eb7fbd3726a145df0d793b5c4f0_NeikiAnalytics

Files

99ea5eb7fbd3726a145df0d793b5c4f0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

9547437d3d28b930fe856897a9a434c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sb_utility

?CheckOldIniPath@SBUtility@@YAHPBD@Z
?GetOrCreateFolder@SBUtility@@YAHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@QBQBDH@Z

mfc100

ord13170
ord901
ord1296
ord7600
ord5207
ord310
ord265

msvcr100

_acmdln
_initterm
_initterm_e
exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_crt_debugger_hook
_unlock
__dllonexit
_ismbblead
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
toupper
__CxxFrameHandler3
strncpy_s
strcat_s
_configthreadlocale
_lock

kernel32

UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
FormatMessageA
LocalFree
GetWindowsDirectoryA
GetPrivateProfileStringA
TerminateProcess
EncodePointer

user32

MessageBoxA

ole32

CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9547437d3d28b930fe856897a9a434c5

Headers

DLL Characteristics

File Characteristics

Imports

sb_utility

mfc100

msvcr100

kernel32

user32

ole32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 1KB - Virtual size: 1KB