44110a17f7b34c0155594aa947a58360_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

44110a17f7b34c0155594aa947a58360_NeikiAnalytics.exe
Size

684KB
MD5

44110a17f7b34c0155594aa947a58360
SHA1

7b3103c8eff973642e42359c330cb0f112188bca
SHA256

1036547d4c61b92c63d63053f133bdbe31ccc17c8fa2e8c61e95507346dcb4ec
SHA512

8c1725fccf4918a526d8a35a23cca6b027630e07e3d3ce27d162b902b7bd68f68283216ea6e365a80516b0b6de10bd16e6101f7e1dc5c674bd2f95cb31f9a630
SSDEEP

12288:RYTj57SBMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:uxDSkQ/7Gb8NLEbeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44110a17f7b34c0155594aa947a58360_NeikiAnalytics.exe

Files

44110a17f7b34c0155594aa947a58360_NeikiAnalytics.exe
.exe windows:10 windows x64 arch:x64

32314b0749d6e242a4d9b55c6738dad5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

midl.pdb

Imports

kernel32

GetCommandLineW
GetStdHandle
GetEnvironmentVariableW
WaitForSingleObject
MultiByteToWideChar
CloseHandle
LocalFree
CreateProcessW
CreateProcessA
GetExitCodeProcess
Sleep
GetTempPathA
GetLastError
HeapSetInformation
GetTempFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
OutputDebugStringA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount

msvcrt

fflush
_unlink
printf
fopen
fclose
fgetc
isspace
_errno
_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
__setusermatherr
_initterm
_fmode
isdigit
memcpy
memset
__C_specific_handler
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
setvbuf
isxdigit
isleadbyte
calloc
free
localeconv
mbtowc
__mb_cur_max
_iob
_snprintf
_itoa
wctomb
malloc
??1type_info@@UEAA@XZ
_read
__badioinfo
__pioinfo
realloc
_write
_lseeki64
wcsstr
strstr
atoi
ctime
_makepath
strncmp
_fileno
fprintf
_isatty
_splitpath
fseek
_vsnprintf
_fgetchar
freopen
_strnicmp
_commode
__iob_func
putc
_fsopen
_setmode
fwrite
strcmp

shell32

CommandLineToArgvW

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

32314b0749d6e242a4d9b55c6738dad5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

shell32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 568KB - Virtual size: 572KB