7cec81f07290f1ca40fe9cf433599380_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

7cec81f07290f1ca40fe9cf433599380_NeikiAnalytics.exe
Size

678KB
MD5

7cec81f07290f1ca40fe9cf433599380
SHA1

84b155369d28f2f3e0ddcc22dfab07f1d32a05ff
SHA256

9142af0bb0d50e4aef7b19b6294e5e7fc0c3c2fc5ec7490bf72bcdf654e30a5d
SHA512

38738611b804ecc7bf85f2497a951e8562677d26e5e70d91f64f93f6dbd5bc8f7cc4cbe0b7db6f9735e01fb1f49ed4a52063e4792a411287b355b85880a44d00
SSDEEP

12288:eAqtTs+hv/eNkaelLfsC24ptE38pScw/+xkyjdu+0fwrEQAZWbbR5X9CHJZ64:eAYTswv/e2aeV0jUE38Mcw/+yy0+gwAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cec81f07290f1ca40fe9cf433599380_NeikiAnalytics.exe

Files

7cec81f07290f1ca40fe9cf433599380_NeikiAnalytics.exe
.exe windows:10 windows x86 arch:x86

d3420c3c9d1ee443c8706ce9ddf85614

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxc.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
_initterm

api-ms-win-crt-private-l1-1-0

_o__callnewh
_o__cexit
_o__configthreadlocale
_o__configure_wide_argv
_o__controlfp_s
_o__crt_atexit
_o__errno
_o__exit
_o__get_initial_wide_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__recalloc
_o__register_onexit_function
_o__set_app_type
memmove
_o__set_new_mode
_o_calloc
_o_ceil
_o_exit
_o_free
_o_malloc
_o_strtoul
_o_terminate
_o_tolower
_except_handler4_common
_o___stdio_common_vsprintf_s
__CxxFrameHandler3
_CxxThrowException
_o___stdio_common_vfprintf
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o___p___wargv
_o___p___argc
_o___acrt_iob_func
memchr
memcmp
memcpy
_o__seh_filter_exe
_o__set_fmode

api-ms-win-crt-string-l1-1-0

memset

kernel32

InitOnceExecuteOnce
FormatMessageW
InitializeCriticalSectionAndSpinCount
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
WriteFile
CreateFileW
GetLastError
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap

oleaut32

SysStringLen
VariantClear
VariantInit
SysFreeString

ole32

CoTaskMemFree
CoTaskMemAlloc
CoGetMalloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

api-ms-win-core-console-l1-1-0

GetConsoleOutputCP

api-ms-win-core-file-l1-1-0

GetFileSizeEx
ReadFile

api-ms-win-core-heap-l1-1-0

HeapReAlloc
HeapSize

api-ms-win-core-localization-l1-2-0

FormatMessageA

api-ms-win-core-processthreads-l1-1-0

TlsAlloc
TlsSetValue
TlsFree
TlsGetValue

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 572KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d3420c3c9d1ee443c8706ce9ddf85614

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

oleaut32

ole32

version

api-ms-win-core-console-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-synch-l1-1-0

Sections

.text Size: 98KB - Virtual size: 97KB

.data Size: 2KB - Virtual size: 3KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 572KB - Virtual size: 576KB

.text
Size: 98KB - Virtual size: 97KB

.data
Size: 2KB - Virtual size: 3KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 572KB - Virtual size: 576KB