General

Malware Config

Signatures

Files

• ff1bede089edc88ecc86285da3479950_NeikiAnalytics.exe

  .exe windows:4 windows x86 arch:x86

  8abecba2211e61763c4c9ffcaa13369e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mfc42

  ord2770

  ord356

  ord2781

  ord4058

  ord3181

  ord2764

  ord1980

  ord668

  ord926

  ord924

  ord941

  ord4129

  ord537

  ord540

  ord6282

  ord825

  ord6283

  ord5683

  ord5710

  ord858

  ord800

  ord535

  ord859

  msvcrt

  _adjust_fdiv

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler3

  _controlfp

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _beginthread

  rand

  fgetc

  fputc

  fwrite

  rename

  fopen

  fseek

  fread

  fclose

  _stat

  __CxxFrameHandler

  _mbscmp

  kernel32

  GetCurrentThread

  GetCurrentProcess

  SetPriorityClass

  lstrcatA

  lstrcpyA

  GetEnvironmentVariableA

  GetShortPathNameA

  GetModuleFileNameA

  GetFileAttributesA

  DeleteFileA

  SetFileAttributesA

  GetSystemDirectoryA

  WaitForSingleObject

  CreateProcessA

  Sleep

  GetLogicalDrives

  GetModuleHandleA

  GetStartupInfoA

  SetThreadPriority

  user32

  LoadIconA

  MessageBoxA

  shell32

  ShellExecuteExA

  SHChangeNotify

  Sections

  .text

  Size: 8KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 352B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ