abf791833b2595ac88b2344ae9aff9d0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

abf791833b2595ac88b2344ae9aff9d0_NeikiAnalytics
Size

4.0MB
MD5

abf791833b2595ac88b2344ae9aff9d0
SHA1

e96d24a0117f1513f7310bae221a793a498b73d7
SHA256

2d49100dddfbf315415421939f58d17741e512f7369ed0209741ded68a008d01
SHA512

6208b778ecba96a129ff166d9b7c2b76f4478d907613e8be666b5bc55ffcd01db4266c5b0c93479a890d70fb38a90837a14add3725b2626e52f3299c11cc08dc
SSDEEP

49152:f51qkqMK+JLfAqCZDkYOMwwnMb4PmyVCHjTwHii:f51qfMK+JLfA12YOXwnS4rVehi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf791833b2595ac88b2344ae9aff9d0_NeikiAnalytics

Files

abf791833b2595ac88b2344ae9aff9d0_NeikiAnalytics
.exe windows:4 windows

0763303a6a96a01885b95e7dc505cf86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

netfxupdate.pdb

Imports

kernel32

GetLastError
GetVersionExA
GetModuleFileNameA
GetWindowsDirectoryA
WaitForSingleObject
CreateProcessA
GetTempPathA
GetLocalTime
CreateFileA
SetFilePointer
WriteFile
GetExitCodeProcess
CloseHandle
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetACP
GetOEMCP
GetCPInfo
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
GetCurrentThread
TlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
FatalAppExitA
LoadLibraryA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
ReadFile
InitializeCriticalSection
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
SetEndOfFile
HeapSize
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA

advapi32

RegSetValueExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0763303a6a96a01885b95e7dc505cf86

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 18KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 18KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB