3c003520a83ed5b79d6aa53c0df087379137b4ebe26b2b501b27b014ccadec37_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

3c003520a83ed5b79d6aa53c0df087379137b4ebe26b2b501b27b014ccadec37_NeikiAnalytics
Size

236KB
MD5

5e0ddf85ac2abc1c5a864fbee4d558b7
SHA1

9571508673f267e82c980a7414c3745bc964065d
SHA256

3c003520a83ed5b79d6aa53c0df087379137b4ebe26b2b501b27b014ccadec37
SHA512

1b8adf7283f9637e129d4e509757cafa58f5a02087ac845cb86a3c7900f1b7ec371228ac96a09bb89c10e6f483f640d6da4f292931ec0e22275b5257444d1676
SSDEEP

3072:77D4WHf2lkzMuCvYtDSRsCK8jjKOoxG5WPq9fYIerfM1cnqcaMH:PDtFM/gtDIK8jjnM4fY/rM1cns0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c003520a83ed5b79d6aa53c0df087379137b4ebe26b2b501b27b014ccadec37_NeikiAnalytics

Files

3c003520a83ed5b79d6aa53c0df087379137b4ebe26b2b501b27b014ccadec37_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

a802711d903e83dfdb482df07a656284

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
TerminateThread
GetLargestConsoleWindowSize
GetStdHandle
GetProcAddress
GetTapeStatus
SetFileAttributesA
LocalAlloc
GetThreadPriority
GetModuleHandleA
GetDriveTypeA
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetModuleHandleW
GetCurrentProcess
GetProcessShutdownParameters
GetEnvironmentVariableW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapAlloc
GetLastError
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA

user32

EndPaint
GetFocus
SetScrollRange
SetPropW
GetScrollRange
MapVirtualKeyA
GetWindowContextHelpId
LoadImageA

advapi32

ReportEventW
RegDeleteKeyA
EqualSid
AdjustTokenPrivileges

Exports

Exports

MyFunc32

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a802711d903e83dfdb482df07a656284

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 322KB

.rsrc Size: 143KB - Virtual size: 142KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 322KB

.rsrc
Size: 143KB - Virtual size: 142KB

.reloc
Size: 7KB - Virtual size: 6KB