General

Malware Config

Signatures

Files

• adeac8313ee0e62d1a19c5629be522b0_NeikiAnalytics.exe

  .exe windows:6 windows x64 arch:x64

  91101e4ec53c5bf16a34a20579b781f4

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  HeapReAlloc

  GetVersion

  LocalAlloc

  LocalFree

  GetModuleFileNameW

  ExitProcess

  LoadLibraryA

  GetModuleHandleA

  GetProcAddress

  user32

  MessageBoxA

  CharUpperBuffW

  advapi32

  CryptEncrypt

  shell32

  ShellExecuteA

  msvcp140

  ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

  ntdll

  RtlLookupFunctionEntry

  normaliz

  IdnToAscii

  wldap32

  ord33

  crypt32

  CertGetCertificateChain

  ws2_32

  ntohs

  psapi

  GetModuleInformation

  userenv

  UnloadUserProfile

  vcruntime140

  __std_terminate

  vcruntime140_1

  __CxxFrameHandler4

  api-ms-win-crt-runtime-l1-1-0

  _invalid_parameter_noinfo_noreturn

  api-ms-win-crt-string-l1-1-0

  strncmp

  api-ms-win-crt-heap-l1-1-0

  free

  api-ms-win-crt-stdio-l1-1-0

  __p__commode

  api-ms-win-crt-filesystem-l1-1-0

  remove

  api-ms-win-crt-utility-l1-1-0

  qsort

  api-ms-win-crt-time-l1-1-0

  _gmtime64

  api-ms-win-crt-convert-l1-1-0

  strtol

  api-ms-win-crt-locale-l1-1-0

  _configthreadlocale

  api-ms-win-crt-math-l1-1-0

  __setusermatherr

  Sections

  .text

  Size: - Virtual size: 520KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: - Virtual size: 115KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 279KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .:6R

  Size: - Virtual size: 6.8MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .(<)

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .Yk

  Size: 9.6MB - Virtual size: 9.6MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 236B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ