96a31016f5f43f0c85b490490b1b53f0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

96a31016f5f43f0c85b490490b1b53f0_NeikiAnalytics.exe
Size

2.3MB
MD5

96a31016f5f43f0c85b490490b1b53f0
SHA1

4992aa481ae7b9aee1621ccd7a983a0d79337461
SHA256

fe0db2eb82cf6dd60bb39d4ea3d3e08f1af59e71a5f0fe1930c5af078c8aa81e
SHA512

063b17b019c14dccf9f61aa1148ec7bbd01e9e81a1dace4503b2045ac5ec39686d878754bc703a4275485953360a9f8041a004dec676bcaff3fd459af002ebc1
SSDEEP

49152:9dJlFVHMF4A+tcqh1nNmUHf4llixNUdilP7AJBe6:9d7FVHAUcK1nNT/4lCka

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96a31016f5f43f0c85b490490b1b53f0_NeikiAnalytics.exe

Files

96a31016f5f43f0c85b490490b1b53f0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

ff0dfb1c56cd09d35e789a06a3c48ae7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAGetLastError

ole32

OleGetClipboard

kernel32

GetUserGeoID
ConnectNamedPipe
GetNumberOfConsoleInputEvents
GlobalSize
WTSGetActiveConsoleSessionId
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateJobObject
GetStringTypeW
LoadLibraryExW
GetBinaryTypeW
GetModuleFileNameW
DeleteCriticalSection
SetStdHandle
CloseHandle

advapi32

DestroyPrivateObjectSecurity
ReportEventW

user32

GetMessagePos
RegisterRawInputDevices
SetProcessWindowStation
GetSysColorBrush
GetSystemMenu
UnloadKeyboardLayout
BeginPaint
GetMessageA

powrprof

WriteGlobalPwrPolicy

gdi32

StrokeAndFillPath
GetDeviceCaps
OffsetViewportOrgEx
CloseEnhMetaFile
CreateCompatibleBitmap
OffsetClipRgn
DeleteObject
ExcludeClipRect

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 392KB - Virtual size: 394KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lq8zSJD
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff0dfb1c56cd09d35e789a06a3c48ae7

Headers

File Characteristics

Imports

ws2_32

ole32

kernel32

advapi32

user32

powrprof

gdi32

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 4KB - Virtual size: 2KB

.code Size: 392KB - Virtual size: 394KB

lq8zSJD Size: 16KB - Virtual size: 12KB

.crt1 Size: 1.6MB - Virtual size: 1.6MB

.CRT Size: 4KB - Virtual size: 4B

.rsrc Size: 40KB - Virtual size: 38KB

DATA Size: 80KB - Virtual size: 79KB

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 4KB - Virtual size: 2KB

.code
Size: 392KB - Virtual size: 394KB

lq8zSJD
Size: 16KB - Virtual size: 12KB

.crt1
Size: 1.6MB - Virtual size: 1.6MB

.CRT
Size: 4KB - Virtual size: 4B

.rsrc
Size: 40KB - Virtual size: 38KB

DATA
Size: 80KB - Virtual size: 79KB