5946d7df6d23930bcec06ba19e9700d0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5946d7df6d23930bcec06ba19e9700d0_NeikiAnalytics.exe
Size

1.3MB
MD5

5946d7df6d23930bcec06ba19e9700d0
SHA1

1371e7ea9b4ceefe93f92231e03e7c6e2cae39bf
SHA256

4131522d55253954eac0199eb00bc7ec173c957e8ee0de35c5a2e0571f7d30ac
SHA512

fdb449038dea5af77301d7c3cb3a2e134965320dbf023739bb6a1529e50f2922898e20f07d8b9b22e530ed305b5b21de83c208723756a8158c86db366848f545
SSDEEP

24576:inhN6szxojVbYbvRV43MdhFEYain4RtYH4RXLPlwThTO57I5s2ii2oyjW8Csre:YxjzEUG9LUhTyI5s2ii2oyjW8fr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5946d7df6d23930bcec06ba19e9700d0_NeikiAnalytics.exe

Files

5946d7df6d23930bcec06ba19e9700d0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f373bbdc4e57d81d09a85475a54adca9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
WaitForMultipleObjects
GetLastError
CreateProcessA
CloseHandle
GetFileAttributesA
GetCurrentProcessId
FindClose
FindNextFileA
FindFirstFileA
FileTimeToSystemTime
MultiByteToWideChar
SetFilePointer
SetLastError
FlushFileBuffers
ReadFile
WriteFile
CreateFileA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetCurrentThreadId
CreateThread
Sleep
TlsSetValue
TlsGetValue
TlsAlloc
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
DeleteFileA
GetCommandLineA
GetVersion
MoveFileA
FileTimeToLocalFileTime
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetProcAddress
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
GetCPInfo
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetExitCodeProcess
GetACP
GetOEMCP
LoadLibraryA
CreateFileW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameA
GetCurrentDirectoryA

Exports

Exports

CPLAcquireMutex
CPLBinaryToHex
CPLCalloc
CPLCleanupTLS
CPLCloseShared
CPLCreateMutex
CPLCreateOrAcquireMutex
CPLCreateThread
CPLDMSToDec
CPLDebug
CPLDecToDMS
CPLDecToPackedDMS
CPLDestroyMutex
CPLDumpSharedList
CPLError
CPLErrorV
CPLEscapeString
CPLExtractRelativePath
CPLFGets
CPLFormCIFilename
CPLFormFilename
CPLGetBasename
CPLGetDirname
CPLGetExtension
CPLGetFilename
CPLGetPID
CPLGetPath
CPLGetSharedList
CPLGetTLS
CPLGetThreadingModel
CPLHexToBinary
CPLIsFilenameRelative
CPLLockFile
CPLMalloc
CPLOpenShared
CPLPackedDMSToDec
CPLParseNameValue
CPLPrintDouble
CPLPrintInt32
CPLPrintPointer
CPLPrintString
CPLPrintStringFill
CPLPrintTime
CPLPrintUIntBig
CPLProjectRelativeFilename
CPLReadDir
CPLReadLine
CPLReadLineL
CPLRealloc
CPLReleaseMutex
CPLResetExtension
CPLSPrintf
CPLScanDouble
CPLScanLong
CPLScanPointer
CPLScanString
CPLScanUIntBig
CPLSetTLS
CPLSleep
CPLStat
CPLStrdup
CPLStringToComplex
CPLUnescapeString
CPLUnlinkTree
CPLUnlockFile
CPLVerifyConfiguration
CSLAddNameValue
CSLAddString
CSLAppendPrintf
CSLCount
CSLDuplicate
CSLFetchBoolean
CSLFetchNameValue
CSLFetchNameValueMultiple
CSLFindString
CSLGetField
CSLInsertString
CSLInsertStrings
CSLLoad
CSLMerge
CSLPrint
CSLRemoveStrings
CSLSave
CSLSetNameValue
CSLSetNameValueSeparator
CSLTestBoolean
CSLTokenizeString
CSLTokenizeString2
CSLTokenizeStringComplex
GTIFDirectoryInfo
GTIFFree
GTIFKeyGet
GTIFKeyInfo
GTIFKeySet
GTIFNew
GTIFNewSimpleTags
GTIFNewWithMethods
GTIFSetSimpleTagsMethods
GTIFWriteKeys
HFAClose
HFACreate
HFACreateLL
HFACreateLayer
HFACreateOverview
HFADumpDictionary
HFADumpTree
HFAFlush
HFAGetBandInfo
HFAGetBandNoData
HFAGetDataRange
HFAGetDataTypeBits
HFAGetDataTypeName
HFAGetDatum
HFAGetGeoTransform
HFAGetMapInfo
HFAGetMetadata
HFAGetOverviewInfo
HFAGetOverviewRasterBlock
HFAGetPCT
HFAGetProParameters
HFAGetRasterBlock
HFAGetRasterInfo
HFAOpen
HFASetDatum
HFASetMapInfo
HFASetMetadata
HFASetOverviewRasterBlock
HFASetPCT
HFASetProParameters
HFASetRasterBlock
ST_Create
ST_Destroy
ST_GetKey
ST_SetKey
ST_TagType
VSICTime
VSICalloc
VSICleanupFileManager
VSIFClose
VSIFCloseL
VSIFEof
VSIFEofL
VSIFFlush
VSIFFlushL
VSIFGetc
VSIFGets
VSIFOpen
VSIFOpenL
VSIFPrintf
VSIFPutc
VSIFPuts
VSIFRead
VSIFReadL
VSIFSeek
VSIFSeekL
VSIFTell
VSIFTellL
VSIFWrite
VSIFWriteL
VSIFileFromMemBuffer
VSIFree
VSIGMTime
VSIGetMemFileBuffer
VSIInstallLargeFileHandler
VSIInstallMemFileHandler
VSILocalTime
VSIMalloc
VSIMkdir
VSIRealloc
VSIRename
VSIRewind
VSIRewindL
VSIRmdir
VSIStat
VSIStatL
VSIStrdup
VSIStrerror
VSITime
VSIUngetc
VSIUnlink
XTIFFClientOpen
XTIFFClose
XTIFFFdOpen
XTIFFInitialize
XTIFFOpen
_CPLDefaultErrorHandler@12
_CPLErrorReset@0
_CPLFreeConfig@0
_CPLGetConfigOption@8
_CPLGetLastErrorMsg@0
_CPLGetLastErrorNo@0
_CPLGetLastErrorType@0
_CPLLoggingErrorHandler@12
_CPLPopErrorHandler@0
_CPLPushErrorHandler@4
_CPLQuietErrorHandler@12
_CPLSetConfigOption@8
_CPLSetErrorHandler@4
_CSLDestroy@4
_GTIFFree
_GTIFSetDefaultTIFF
_GTIFcalloc
_GTIFmemcpy
_GTIFrealloc
__CPLAssert@12

Sections

.text
Size: 968KB - Virtual size: 965KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f373bbdc4e57d81d09a85475a54adca9

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 968KB - Virtual size: 965KB

.rdata Size: 168KB - Virtual size: 167KB

.data Size: 196KB - Virtual size: 291KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 968KB - Virtual size: 965KB

.rdata
Size: 168KB - Virtual size: 167KB

.data
Size: 196KB - Virtual size: 291KB

.rsrc
Size: 8KB - Virtual size: 4KB