380501cfce7e34132be877b4c9d702f0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

380501cfce7e34132be877b4c9d702f0_NeikiAnalytics.exe
Size

20KB
MD5

380501cfce7e34132be877b4c9d702f0
SHA1

8801d0ec0fb83e13a0b7516a1c47b17fc79b430c
SHA256

39453e241fac6bba4a76d22ec0522f2a28f9b2f61761ce3af777aad13852bd1c
SHA512

8025d50ebf4446736ae802ca969a434c6b695f6a8d1d56db18e277d843b0fa02cdd416a5257bf14f8290230d6418bc4e37f25f1327b92c8f34393af1e8fde051
SSDEEP

384:evSiy5euJ9vmTr4VRWODz8f0dVfZS8aMH6T+IoNxKf3fYUAeak9YbHlW1rdW:ev7/uVMfEfZs9fvXAeaZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380501cfce7e34132be877b4c9d702f0_NeikiAnalytics.exe

Files

380501cfce7e34132be877b4c9d702f0_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

7bce93f5421e5f034827bdedd148e116

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

winusb.pdb

Imports

msvcrt

memset
memcpy
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtQueryInformationFile

kernel32

GetCurrentProcessId
QueryPerformanceCounter
Sleep
CloseHandle
DeviceIoControl
ResetEvent
SetLastError
GetLastError
GetOverlappedResult
CreateEventA
GetProcessHeap
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId

Exports

Exports

WinUsb_AbortPipe
WinUsb_ControlTransfer
WinUsb_FlushPipe
WinUsb_Free
WinUsb_GetAssociatedInterface
WinUsb_GetCurrentAlternateSetting
WinUsb_GetDescriptor
WinUsb_GetOverlappedResult
WinUsb_GetPipePolicy
WinUsb_GetPowerPolicy
WinUsb_Initialize
WinUsb_ParseConfigurationDescriptor
WinUsb_ParseDescriptors
WinUsb_QueryDeviceInformation
WinUsb_QueryInterfaceSettings
WinUsb_QueryPipe
WinUsb_ReadPipe
WinUsb_ResetPipe
WinUsb_SetCurrentAlternateSetting
WinUsb_SetPipePolicy
WinUsb_SetPowerPolicy
WinUsb_WritePipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bce93f5421e5f034827bdedd148e116

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

kernel32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 576B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 138B

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 576B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 138B