0ce5e2763accde6a55bacd3af23beb10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0ce5e2763accde6a55bacd3af23beb10_NeikiAnalytics.exe
Size

46KB
MD5

0ce5e2763accde6a55bacd3af23beb10
SHA1

55e955dc5397fec0f6f4affcde6423ed229d04cd
SHA256

f6e94ab80d181e5de70795eda682188fb5a50ea7ae22aec865d37e90f4f21406
SHA512

4ad734bce834b63cc688944414aa9459708795745e9e45e68ac6d4f73a34ddbe994a924a2de8ffc1c9b9af28f17419f0840f8e34072a001afd8dedb7ac9fe881
SSDEEP

768:nndT2AR8P7WKrSoQ5g9e0Xd3HFA8WOe4aV/oELS2C91YWZxi:ndT248FNQO80jWOe4aN09ui0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ce5e2763accde6a55bacd3af23beb10_NeikiAnalytics.exe

Files

0ce5e2763accde6a55bacd3af23beb10_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

94eb6cb57570ddebe52dca0c228c8e0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Personal\Desktop\libimobiledevice-vs-master\libimobiledevice-vs-master\x64\Release\irecovery.pdb

Imports

kernel32

CancelIo
DeviceIoControl
WaitForSingleObject
Sleep
CreateFileA
CloseHandle
GetOverlappedResult
GetFileSize
CreateEventA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateThread
DeleteCriticalSection
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
RtlCaptureContext
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA

vcruntime140

strchr
memset
__C_specific_handler
__std_type_info_destroy_list
memcpy
strstr
strrchr

api-ms-win-crt-string-l1-1-0

strncmp
toupper
strtok
_strdup
tolower

api-ms-win-crt-stdio-l1-1-0

fread
fopen
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vfprintf
fclose
__stdio_common_vsscanf

api-ms-win-crt-convert-l1-1-0

strtoul
strtol

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm_e
_seh_filter_dll
_initterm
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

Exports

Exports

irecv_close
irecv_device_event_subscribe
irecv_device_event_unsubscribe
irecv_devices_get_all
irecv_devices_get_device_by_client
irecv_devices_get_device_by_hardware_model
irecv_devices_get_device_by_product_type
irecv_event_subscribe
irecv_event_unsubscribe
irecv_execute_script
irecv_exit
irecv_finish_transfer
irecv_get_device_info
irecv_get_mode
irecv_getenv
irecv_getret
irecv_init
irecv_open_with_ecid
irecv_open_with_ecid_and_attempts
irecv_reboot
irecv_receive
irecv_reconnect
irecv_recv_buffer
irecv_reset
irecv_reset_counters
irecv_saveenv
irecv_send_buffer
irecv_send_command
irecv_send_file
irecv_set_debug_level
irecv_setenv
irecv_strerror
irecv_trigger_limera1n_exploit
irecv_usb_bulk_transfer
irecv_usb_control_transfer
irecv_usb_set_configuration
irecv_usb_set_interface

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94eb6cb57570ddebe52dca0c228c8e0d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

setupapi

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 5KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 772B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 5KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 772B