af4ed432b8a6c99636261a5c9a3eaba0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

af4ed432b8a6c99636261a5c9a3eaba0_NeikiAnalytics
Size

371KB
MD5

af4ed432b8a6c99636261a5c9a3eaba0
SHA1

a6ef267b0ed98b60bd453685fb9f865e160234c3
SHA256

4500cd9bc7756be635ce6ae1f2463c74cb4d9e7e857a51006b4f154ebaa0320b
SHA512

a6c23f56f943577152dd1111ec65f62d01fd48bbecf315aa28964d44a2a2d6e4b1932740490b436d7b35c0d3655286fe7a53e12c8c58602bab9da14152e0d4a9
SSDEEP

6144:QjeTTckSIf5Opzxi1GCyCseOhiRoIPKRRHtckRct8AOEBFBV+UdvrEFp7hKHca:Q2Ff5OpzxaGCyNhiPPKRxtckY8EFBjvT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4ed432b8a6c99636261a5c9a3eaba0_NeikiAnalytics

Files

af4ed432b8a6c99636261a5c9a3eaba0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

519725a05f6d3283592a2ef4bc96d347

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
ntohl
htonl
ntohs

kernel32

TlsGetValue
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
CloseHandle
CreateFileA
Sleep
GetModuleHandleW
ExitProcess
SetFilePointer
MultiByteToWideChar
ReadFile
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
SetEnvironmentVariableW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
RaiseException
InitializeCriticalSectionAndSpinCount
SetEndOfFile
GetProcessHeap
LoadLibraryA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

519725a05f6d3283592a2ef4bc96d347

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 211KB - Virtual size: 211KB

.rdata Size: 75KB - Virtual size: 75KB

.data Size: 6KB - Virtual size: 580KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 211KB - Virtual size: 211KB

.rdata
Size: 75KB - Virtual size: 75KB

.data
Size: 6KB - Virtual size: 580KB

.rsrc
Size: 512B - Virtual size: 436B