e433ef11af9531a387f2f813a2aa4e40_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e433ef11af9531a387f2f813a2aa4e40_NeikiAnalytics.exe
Size

19KB
MD5

e433ef11af9531a387f2f813a2aa4e40
SHA1

db4be60ed2ef45adffd6b37c870fb5ac5036392c
SHA256

503ade4c71066fcfcf3f362430f970139be1049fb57a60f13a28bba920ef5dcd
SHA512

080f98ea11ce4d5d3de6623982c1ea87c24196121a2778459f16d2f62de9bf75c7cbfe4b1bfadb4c2471316c5166410aecc37be8c04b8e5902f08f85063acee5
SSDEEP

384:ezmEALrrPuRsC5VSnSdBK/dlFxqEt5tHkgVvxTRsbw+:eyEcrSyLIK/7FxPt7vxybw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e433ef11af9531a387f2f813a2aa4e40_NeikiAnalytics.exe

Files

e433ef11af9531a387f2f813a2aa4e40_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

516eeaee0259439e0c73215fb4d8639a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sql

TextFree
IsamStrcpy
IsamStrchr
HebrewFilter
IsamGetenv
IsamStrlen
IsamStrcat
bcopy
SSExit
sql_prep
sql_docdirscr
sql_docdir_exec
IsamSigMark
IsamKillMsg
sql_signal_remove_tmpfiles
IsamSigInterrupt
IsamTmpPath
IsamModuleCheckOK
TextAlloc
IsamAlloc
IsamFree
IsamStrncmpA
IsamIsdigit
TabulaMessageBox
SysExists
IsamFileCopySimple

user32

GetSystemMetrics
TranslateMessage
DispatchMessageW
RegisterClassW
CreateWindowExW
DefWindowProcW
PeekMessageW

msvcr100

_vswprintf_c_l
fwrite
rewind
fread
_wfopen
_wfreopen
fclose
fseek
vfprintf
vfwprintf
fputc
fputwc
swscanf
fputws
fscanf
fwscanf
getc
fgetwc
fgets
fgetws
ungetc
ungetwc
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
__wargv
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__iob_func
__argc
fputs
_initterm_e

kernel32

WideCharToMultiByte
GetVersion
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
MultiByteToWideChar
GetACP
GetSystemDefaultLCID
GetFileAttributesW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

516eeaee0259439e0c73215fb4d8639a

Headers

DLL Characteristics

File Characteristics

Imports

sql

user32

msvcr100

kernel32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 126KB

.rsrc Size: 512B - Virtual size: 408B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 126KB

.rsrc
Size: 512B - Virtual size: 408B

.reloc
Size: 1KB - Virtual size: 1KB