6d3577d7ca6342c562164c7c4267bfa0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6d3577d7ca6342c562164c7c4267bfa0_NeikiAnalytics.exe
Size

29KB
MD5

6d3577d7ca6342c562164c7c4267bfa0
SHA1

e0e10da5b1b9a17b9a1764bfa57bb7e09a60e208
SHA256

fbebdee01158c0c23554c435491b617f7d547b9ae59e1f2247cfa58e7eb1545a
SHA512

9d1fd538d2487086ec43f5f8afefad6b59e5cf465071366a585e84a227f37b1b14b759f0b5ae395034eca5752c22f9728185f88ac4136e2aa4ff439e130589c7
SSDEEP

384:3I1LEZaY2V/txd72lyCKxSnVScmTtjCflgQTrz3x7rfsxpxkcSlsj/ilpiFdL3br:23txChVgtjWlgQTrztrfsLM+/ieTDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d3577d7ca6342c562164c7c4267bfa0_NeikiAnalytics.exe

Files

6d3577d7ca6342c562164c7c4267bfa0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

8ac8b159d5f3b1f56910fb5a46c08506

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
FreeLibrary
GetCommState
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
PurgeComm
ReadFile
SetCommMask
SetCommState
SetCommTimeouts
SetLastError
SetupComm
TlsGetValue
VirtualProtect
VirtualQuery
WaitCommEvent
WideCharToMultiByte
WriteFile

libmingwex-4

__mingw_free
__mingw_realloc

msvcrt

__dllonexit
_errno
_iob
abort
calloc
fflush
fwrite
malloc
vfprintf

agena

agnL_gettablefield
agn_checklstring
agn_checkstring
agn_getbuffersize
agn_poptop
agn_rawsetfield
asm_memset
luaL_checkudata
luaL_error
luaL_isudata
luaL_newmetatable
luaL_optinteger
luaL_register
lua_createtable
lua_getfield
lua_gettop
lua_isnumber
lua_newuserdata
lua_objlen
lua_pushboolean
lua_pushfstring
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushvalue
lua_rawset
lua_setfield
lua_setmetatable
lua_settop
lua_tointeger
lua_tolstring
lua_topointer
lua_touserdata
my_ioerror
tools_memcpy
tools_nextmultiple
tools_optstrlen

Exports

Exports

bitfield_checkpos
bitfield_clear
bitfield_flip
bitfield_get
bitfield_init
bitfield_new
bitfield_resize
bitfield_set
bitfield_setbit
bitfield_size
charbuf_append
charbuf_appendchar
charbuf_extendby
charbuf_growsize
charbuf_init
charbuf_insert
charbuf_remove
charbuf_removelast
charbuf_resize
filename_to_utf8
luaopen_com
sys_seterror
sys_strerror

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 100B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ac8b159d5f3b1f56910fb5a46c08506

Headers

File Characteristics

Imports

kernel32

libmingwex-4

msvcrt

agena

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 8B

.rdata Size: 2KB - Virtual size: 2KB

/4 Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 100B

.edata Size: 1024B - Virtual size: 624B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 1024B - Virtual size: 692B

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 8B

.rdata
Size: 2KB - Virtual size: 2KB

/4
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 100B

.edata
Size: 1024B - Virtual size: 624B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 1024B - Virtual size: 692B