7c63b00d0bb73b7dc6c03b74874e1120_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7c63b00d0bb73b7dc6c03b74874e1120_NeikiAnalytics.exe
Size

277KB
MD5

7c63b00d0bb73b7dc6c03b74874e1120
SHA1

facce1cf6109db54cf0b93b9f81fb62822695f75
SHA256

134b53fabd35c82f5c69dec5265ed51a4cff8d39453784c699a506bfdf784acb
SHA512

1d230ec2773b134f619342996c6e633a0cf92380794e01ef7bdacce63372b9360a93e5632e0ed3ffe95b600385c22ff9f15a3796f053e074100fd2ad1a2d92ff
SSDEEP

6144:jnlyYRUhY3QnYQHPJvNh2P7Qc1XJ7YoJWHWXopoQE5oMYjotWnKuopoJE5olYBKa:jn7RUhYAnnHbh2P7Qc1XJ7YoJWHWXop+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c63b00d0bb73b7dc6c03b74874e1120_NeikiAnalytics.exe

Files

7c63b00d0bb73b7dc6c03b74874e1120_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

d531d54206705947a38228d4286ff4b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemInfo
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcr120

fprintf
sprintf
strcmp
sqrt
fclose
fopen
fread
_fseeki64
_ftelli64
fwrite
ceil
__iob_func
calloc
free
malloc
realloc
_aligned_free
_aligned_malloc
_vsnprintf
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
getenv
atoi
memset
floor
memcpy
_beginthreadex
pow

Exports

Exports

gdcmopenjp2opj_codec_set_threads
gdcmopenjp2opj_create_compress
gdcmopenjp2opj_create_decompress
gdcmopenjp2opj_decode
gdcmopenjp2opj_decode_tile_data
gdcmopenjp2opj_destroy_codec
gdcmopenjp2opj_destroy_cstr_index
gdcmopenjp2opj_destroy_cstr_info
gdcmopenjp2opj_dump_codec
gdcmopenjp2opj_encode
gdcmopenjp2opj_end_compress
gdcmopenjp2opj_end_decompress
gdcmopenjp2opj_get_cstr_index
gdcmopenjp2opj_get_cstr_info
gdcmopenjp2opj_get_decoded_tile
gdcmopenjp2opj_get_num_cpus
gdcmopenjp2opj_has_thread_support
gdcmopenjp2opj_image_create
gdcmopenjp2opj_image_data_alloc
gdcmopenjp2opj_image_data_free
gdcmopenjp2opj_image_destroy
gdcmopenjp2opj_image_tile_create
gdcmopenjp2opj_read_header
gdcmopenjp2opj_read_tile_header
gdcmopenjp2opj_set_MCT
gdcmopenjp2opj_set_decode_area
gdcmopenjp2opj_set_decoded_components
gdcmopenjp2opj_set_decoded_resolution_factor
gdcmopenjp2opj_set_default_decoder_parameters
gdcmopenjp2opj_set_default_encoder_parameters
gdcmopenjp2opj_set_error_handler
gdcmopenjp2opj_set_info_handler
gdcmopenjp2opj_set_warning_handler
gdcmopenjp2opj_setup_decoder
gdcmopenjp2opj_setup_encoder
gdcmopenjp2opj_start_compress
gdcmopenjp2opj_stream_create
gdcmopenjp2opj_stream_create_default_file_stream
gdcmopenjp2opj_stream_create_file_stream
gdcmopenjp2opj_stream_default_create
gdcmopenjp2opj_stream_destroy
gdcmopenjp2opj_stream_set_read_function
gdcmopenjp2opj_stream_set_seek_function
gdcmopenjp2opj_stream_set_skip_function
gdcmopenjp2opj_stream_set_user_data
gdcmopenjp2opj_stream_set_user_data_length
gdcmopenjp2opj_stream_set_write_function
gdcmopenjp2opj_version
gdcmopenjp2opj_write_tile

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d531d54206705947a38228d4286ff4b3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr120

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 504B

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 504B