480b89b3fa2c7d3190fbc9e0ff437f80_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

480b89b3fa2c7d3190fbc9e0ff437f80_NeikiAnalytics.exe
Size

4.5MB
MD5

480b89b3fa2c7d3190fbc9e0ff437f80
SHA1

2ed3a2006709b0d1dd4bc7ad2a0f4d10d9884450
SHA256

aa9afd58b85117286a80ae3362875b004749d2fe109192a52e5d1777154ed183
SHA512

16586ba8fce280ffcc3794f82f8f98d244c692195fc045c132078a7e0a3b8b4d397480bdf27ca19890b814a8a9421952c133f9a68c0a0d6a3425fdfa1f7670be
SSDEEP

98304:FK238y9/PKgE1+KTOD0oTRCkDjfxGcMA8a0XDT/9Lp:FR9/yQ5QoEUjfF5KX/9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
480b89b3fa2c7d3190fbc9e0ff437f80_NeikiAnalytics.exe

Files

480b89b3fa2c7d3190fbc9e0ff437f80_NeikiAnalytics.exe
.exe windows:6 windows x64 arch:x64

a874cc27a1e5ff991fe3267408e51944

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindClose
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MessageBoxW
CharUpperBuffW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW

api-ms-win-crt-runtime-l1-1-0

_initialize_wide_environment

api-ms-win-crt-stdio-l1-1-0

fclose

api-ms-win-crt-string-l1-1-0

wcsncmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-heap-l1-1-0

calloc

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func

api-ms-win-crt-filesystem-l1-1-0

_wrename

api-ms-win-crt-convert-l1-1-0

wcstoul

api-ms-win-crt-time-l1-1-0

wcsftime

Sections

.text
Size: - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DGU
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

. 6O
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

./dZ
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a874cc27a1e5ff991fe3267408e51944

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: - Virtual size: 99KB

.rdata Size: - Virtual size: 41KB

.data Size: - Virtual size: 6KB

.pdata Size: - Virtual size: 5KB

_RDATA Size: - Virtual size: 172B

.DGU Size: - Virtual size: 3.0MB

. 6O Size: 3KB - Virtual size: 2KB

./dZ Size: 5.2MB - Virtual size: 5.2MB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 99KB

.rdata
Size: - Virtual size: 41KB

.data
Size: - Virtual size: 6KB

.pdata
Size: - Virtual size: 5KB

_RDATA
Size: - Virtual size: 172B

.DGU
Size: - Virtual size: 3.0MB

. 6O
Size: 3KB - Virtual size: 2KB

./dZ
Size: 5.2MB - Virtual size: 5.2MB

.rsrc
Size: 4KB - Virtual size: 4KB