2fa01124eca70dc2c4ebcdc72f126a70_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

2fa01124eca70dc2c4ebcdc72f126a70_NeikiAnalytics.exe
Size

764KB
MD5

2fa01124eca70dc2c4ebcdc72f126a70
SHA1

50e5dbe1711fd5b2827f2cb5d89998ec63dfa574
SHA256

63e2b25a331d5b53d8417e213e0d502a75fb19f6d94290137ad07381ffa0a6b4
SHA512

bfc1bc3ea1f0f6d0226630a6475bf5eac20feaeb7c4fa9a84f756eade5fc899a2cc667ad8f9cb115138d11c115e20c5a3e222b9d90758ad85fc51fc60a08a340
SSDEEP

12288:6ZcrppLkxkD/aBjBrxyUWfRR6Deh2gjCJ+jWp3Ilrvvb8YNXVXdyC82FvUb7RP8j:62rppLkxKCpBlyUWfRBnlXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa01124eca70dc2c4ebcdc72f126a70_NeikiAnalytics.exe

Files

2fa01124eca70dc2c4ebcdc72f126a70_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

273f102c0dd1cebcab452706a556d874

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
HeapAlloc
HeapFree
GetProcessHeap
HeapReAlloc
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
GetFileAttributesW
DeviceIoControl
GetOverlappedResult
GetLastError
CloseHandle
WriteFile
SetFilePointerEx
ReadFile
GetFileType
GetFileSizeEx
CreateFileW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
FormatMessageW

msvcr120

_onexit
__clean_type_info_names_internal
_except_handler4_common
_calloc_crt
_unlock
_lock
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except1
_time64
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
sprintf_s
wcsncpy
vfprintf
fopen
fclose
_errno
fprintf
_vsnwprintf
swprintf_s
wcstombs_s
memset
memcpy
__dllonexit

Exports

Exports

libesedb_check_file_signature
libesedb_check_file_signature_file_io_handle
libesedb_check_file_signature_wide
libesedb_column_free
libesedb_column_get_identifier
libesedb_column_get_type
libesedb_column_get_utf16_name
libesedb_column_get_utf16_name_size
libesedb_column_get_utf8_name
libesedb_column_get_utf8_name_size
libesedb_error_backtrace_fprint
libesedb_error_backtrace_sprint
libesedb_error_fprint
libesedb_error_free
libesedb_error_sprint
libesedb_file_close
libesedb_file_free
libesedb_file_get_creation_format_version
libesedb_file_get_format_version
libesedb_file_get_number_of_tables
libesedb_file_get_page_size
libesedb_file_get_table
libesedb_file_get_table_by_utf16_name
libesedb_file_get_table_by_utf8_name
libesedb_file_get_type
libesedb_file_initialize
libesedb_file_open
libesedb_file_open_file_io_handle
libesedb_file_open_wide
libesedb_file_signal_abort
libesedb_get_access_flags_read
libesedb_get_codepage
libesedb_get_version
libesedb_index_free
libesedb_index_get_identifier
libesedb_index_get_number_of_records
libesedb_index_get_record
libesedb_index_get_utf16_name
libesedb_index_get_utf16_name_size
libesedb_index_get_utf8_name
libesedb_index_get_utf8_name_size
libesedb_long_value_free
libesedb_long_value_get_data
libesedb_long_value_get_data_segment
libesedb_long_value_get_data_segment_size
libesedb_long_value_get_data_size
libesedb_long_value_get_number_of_data_segments
libesedb_long_value_get_number_of_segments
libesedb_long_value_get_segment_data
libesedb_long_value_get_utf16_string
libesedb_long_value_get_utf16_string_size
libesedb_long_value_get_utf8_string
libesedb_long_value_get_utf8_string_size
libesedb_multi_value_free
libesedb_multi_value_get_column_type
libesedb_multi_value_get_number_of_values
libesedb_multi_value_get_value
libesedb_multi_value_get_value_16bit
libesedb_multi_value_get_value_32bit
libesedb_multi_value_get_value_64bit
libesedb_multi_value_get_value_8bit
libesedb_multi_value_get_value_binary_data
libesedb_multi_value_get_value_binary_data_size
libesedb_multi_value_get_value_data
libesedb_multi_value_get_value_data_size
libesedb_multi_value_get_value_filetime
libesedb_multi_value_get_value_floating_point_32bit
libesedb_multi_value_get_value_floating_point_64bit
libesedb_multi_value_get_value_utf16_string
libesedb_multi_value_get_value_utf16_string_size
libesedb_multi_value_get_value_utf8_string
libesedb_multi_value_get_value_utf8_string_size
libesedb_notify_set_stream
libesedb_notify_set_verbose
libesedb_notify_stream_close
libesedb_notify_stream_open
libesedb_record_free
libesedb_record_get_column_identifier
libesedb_record_get_column_type
libesedb_record_get_long_value
libesedb_record_get_multi_value
libesedb_record_get_number_of_values
libesedb_record_get_utf16_column_name
libesedb_record_get_utf16_column_name_size
libesedb_record_get_utf8_column_name
libesedb_record_get_utf8_column_name_size
libesedb_record_get_value
libesedb_record_get_value_16bit
libesedb_record_get_value_32bit
libesedb_record_get_value_64bit
libesedb_record_get_value_8bit
libesedb_record_get_value_binary_data
libesedb_record_get_value_binary_data_size
libesedb_record_get_value_boolean
libesedb_record_get_value_data
libesedb_record_get_value_data_flags
libesedb_record_get_value_data_size
libesedb_record_get_value_filetime
libesedb_record_get_value_floating_point_32bit
libesedb_record_get_value_floating_point_64bit
libesedb_record_get_value_utf16_string
libesedb_record_get_value_utf16_string_size
libesedb_record_get_value_utf8_string
libesedb_record_get_value_utf8_string_size
libesedb_record_is_long_value
libesedb_record_is_multi_value
libesedb_set_codepage
libesedb_table_free
libesedb_table_get_column
libesedb_table_get_identifier
libesedb_table_get_index
libesedb_table_get_number_of_columns
libesedb_table_get_number_of_indexes
libesedb_table_get_number_of_records
libesedb_table_get_record
libesedb_table_get_utf16_name
libesedb_table_get_utf16_name_size
libesedb_table_get_utf16_template_name
libesedb_table_get_utf16_template_name_size
libesedb_table_get_utf8_name
libesedb_table_get_utf8_name_size
libesedb_table_get_utf8_template_name
libesedb_table_get_utf8_template_name_size

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

273f102c0dd1cebcab452706a556d874

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr120

Exports

Exports

Sections

.text Size: 283KB - Virtual size: 282KB

.rdata Size: 451KB - Virtual size: 450KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 283KB - Virtual size: 282KB

.rdata
Size: 451KB - Virtual size: 450KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 22KB - Virtual size: 22KB