b5513d07ff9a95da67ed19d2985b5790_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

b5513d07ff9a95da67ed19d2985b5790_NeikiAnalytics
Size

346KB
MD5

b5513d07ff9a95da67ed19d2985b5790
SHA1

76b45cb40a932ec3fdcad7e2f481106e2c215072
SHA256

a1149aec5f19f280f596329fbdd093ffbe50bc4f48500f6110835b8446611028
SHA512

ff3b34280c1ece68dc3272d42ddacb4b5b899d5a8c8dcedd29e9dee07055a2711fcfc7e780f6ebd88d351e3450d3a301af17235ee3431fae09558aef09e9c7fc
SSDEEP

6144:EeSOD8MEck0pYTee40EtJeGoGAlMWq9fcd:E68MhhOee40yUGo7lM9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5513d07ff9a95da67ed19d2985b5790_NeikiAnalytics

Files

b5513d07ff9a95da67ed19d2985b5790_NeikiAnalytics
.exe windows:6 windows x64 arch:x64

434ca6ad8c5d7e02db69dc462566f7e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

vcruntime140

__current_exception
__intrinsic_setjmp
__C_specific_handler
memmove
memcpy
longjmp
__current_exception_context
memset

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_configure_narrow_argv
abort
exit
_errno
_initterm
_initterm_e
_exit
terminate
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
strerror

api-ms-win-crt-stdio-l1-1-0

_isatty
_fileno
_set_fmode
clearerr
__stdio_common_vfprintf
fopen
fclose
__acrt_iob_func
fgets
feof
__stdio_common_vfscanf
getc
fread
__stdio_common_vsprintf
__p__commode
ferror

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
realloc
free

api-ms-win-crt-string-l1-1-0

isspace
isalnum
strcmp
strncmp
isprint
isalpha
isdigit
strncpy

api-ms-win-crt-convert-l1-1-0

strtoul
atol
_strtoi64
strtol
_strtoui64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

bsearch
qsort

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

434ca6ad8c5d7e02db69dc462566f7e4

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 133KB - Virtual size: 132KB

.data Size: 4KB - Virtual size: 13KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 516B

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 133KB - Virtual size: 132KB

.data
Size: 4KB - Virtual size: 13KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 516B