56060eeaa1c5f4724f42dcea97fd6b50_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

56060eeaa1c5f4724f42dcea97fd6b50_NeikiAnalytics
Size

84KB
MD5

56060eeaa1c5f4724f42dcea97fd6b50
SHA1

0472a0c7a0c26853fd9c751b80ba483c65dac2b8
SHA256

a41567d4850b836a61cac013bf395a57ff545916566e134bc39aabc21d38fcf3
SHA512

f0ffe32827ebcd000d2371386de220e809fb52a1f6e4406804e47e34faa2d24d94deefd848125fbc0199c7a45e4a7f70be3e76a7d45aa6fa6a371755496d40fd
SSDEEP

1536:iHuWV5NtbwwNw9TxTnCLF74MoRNke31ZJeSWeSVO1j:K1wpTnC4MQdMSCO1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56060eeaa1c5f4724f42dcea97fd6b50_NeikiAnalytics

Files

56060eeaa1c5f4724f42dcea97fd6b50_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

0c9e9ea4ddc790a09ed4f23180df36cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CancelWaitableTimer
CloseHandle
ConnectNamedPipe
CreateDirectoryW
CreateEventW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateNamedPipeW
CreatePipe
CreateProcessW
CreateSemaphoreW
CreateThread
CreateWaitableTimerW
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
EnterCriticalSection
ExpandEnvironmentStringsW
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesExW
GetFileAttributesW
GetLastError
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleW
GetNativeSystemInfo
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessIoCounters
GetProcessTimes
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
GetThreadTimes
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryExW
MoveFileExW
MultiByteToWideChar
OpenSemaphoreW
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputW
ReadFile
RemoveDirectoryW
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetDllDirectoryW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointerEx
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WriteConsoleW
WriteFile

msvcrt

__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_snwprintf
_unlock
_wcsicmp
abort
calloc
free
fwprintf
fwrite
malloc
memchr
memcmp
memcpy
memmove
memset
raise
signal
strchr
strlen
strncmp
vfprintf
wcscpy
wcslen
_timezone
_daylight
_tzset

user32

MessageBoxW
SendMessageTimeoutW

ws2_32

FreeAddrInfoW
GetAddrInfoW
GetNameInfoW
WSAIoctl
WSASend
WSAStartup
accept
bind
closesocket
getsockname
ioctlsocket
recv
send
setsockopt
socket

Exports

Exports

fmed_getmod

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c9e9ea4ddc790a09ed4f23180df36cf

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 60KB

.data Size: 512B - Virtual size: 80B

.rdata Size: 10KB - Virtual size: 10KB

.pdata Size: 1KB - Virtual size: 1KB

.xdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 70B

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 104B

.reloc Size: 512B - Virtual size: 448B

/4 Size: 512B - Virtual size: 20B

.text
Size: 61KB - Virtual size: 60KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 10KB - Virtual size: 10KB

.pdata
Size: 1KB - Virtual size: 1KB

.xdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 70B

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 512B - Virtual size: 448B

/4
Size: 512B - Virtual size: 20B