9743fc3eb95ceee952f0014475d74ed0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

9743fc3eb95ceee952f0014475d74ed0_NeikiAnalytics
Size

306KB
MD5

9743fc3eb95ceee952f0014475d74ed0
SHA1

fe1d0150fa6d2d7b860cc070631fd3d4ff335c40
SHA256

3ad5520e7a8db57f10474896da8a03683a0d07c9c7e9d9e35f794da7d2dc3597
SHA512

16f072813a1e0933a0cbfb2dcf775567d596cb1c48e2987ab90d43ba9bbd9ed5f72f7d51a630b6d0633937057af457328517addf71556576dd4d9a6eb487ed04
SSDEEP

6144:4+JwfqaGEjT/UH70pKc+AXbHl/dJPqQV65P8rGf:4gwpGOje70hXbpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9743fc3eb95ceee952f0014475d74ed0_NeikiAnalytics

Files

9743fc3eb95ceee952f0014475d74ed0_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

c3ca7458a445dbcf9f8190d9db32b2bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemInfo
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

__C_specific_handler
memcpy
memset
memmove
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_cexit
_beginthreadex
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

ceil
pow
floor
sqrt

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
_fseeki64
fclose
fwrite
_ftelli64
__acrt_iob_func
fread
fopen

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

strcmp
strncmp

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
_aligned_free
_aligned_malloc
calloc

Exports

Exports

opj_codec_set_threads
opj_create_compress
opj_create_decompress
opj_decode
opj_decode_tile_data
opj_destroy_codec
opj_destroy_cstr_index
opj_destroy_cstr_info
opj_dump_codec
opj_encode
opj_encoder_set_extra_options
opj_end_compress
opj_end_decompress
opj_get_cstr_index
opj_get_cstr_info
opj_get_decoded_tile
opj_get_num_cpus
opj_has_thread_support
opj_image_create
opj_image_data_alloc
opj_image_data_free
opj_image_destroy
opj_image_tile_create
opj_read_header
opj_read_tile_header
opj_set_MCT
opj_set_decode_area
opj_set_decoded_components
opj_set_decoded_resolution_factor
opj_set_default_decoder_parameters
opj_set_default_encoder_parameters
opj_set_error_handler
opj_set_info_handler
opj_set_warning_handler
opj_setup_decoder
opj_setup_encoder
opj_start_compress
opj_stream_create
opj_stream_create_default_file_stream
opj_stream_create_file_stream
opj_stream_default_create
opj_stream_destroy
opj_stream_set_read_function
opj_stream_set_seek_function
opj_stream_set_skip_function
opj_stream_set_user_data
opj_stream_set_user_data_length
opj_stream_set_write_function
opj_version
opj_write_tile

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3ca7458a445dbcf9f8190d9db32b2bf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 242KB - Virtual size: 242KB

.rdata Size: 51KB - Virtual size: 51KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 9KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 540B

.text
Size: 242KB - Virtual size: 242KB

.rdata
Size: 51KB - Virtual size: 51KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 540B