3acb2df9216cc9eaaa7e4c8a00073440_NeikiAnalytics[.]exe

General

Target

3acb2df9216cc9eaaa7e4c8a00073440_NeikiAnalytics.exe
Size

17KB
MD5

3acb2df9216cc9eaaa7e4c8a00073440
SHA1

b907f30dc3c378d9b02d1dab142410f96aef7e16
SHA256

5890e9dd296b34dfb7048c4d050e7a590b81fdf9148334d2359701591a6f99fc
SHA512

c1a47ce176798c9f27269491a057c335b80034d2f1b7adb24b579e7ddee7e74c15c9f679f3d062cf5eeee50c516940a45efb1eadde01ee5cf51985761087b8fd
SSDEEP

384:icvfunavOGv1/lGOTjUY3vEgUbZtr88IVP37NdF:tHuCVvTjUY3XU/HCP37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3acb2df9216cc9eaaa7e4c8a00073440_NeikiAnalytics.exe

Files

3acb2df9216cc9eaaa7e4c8a00073440_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

8feb8efd3841509bcbc586a5122e2dcf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\sctsexp29_5\documents\visual studio 2010\Projects\lab22\Debug\lab22.pdb

Imports

msvcr100d

__dllonexit
_unlock
_onexit
_crt_debugger_hook
_invoke_watson
_controlfp_s
?terminate@@YAXXZ
_except_handler4_common
_initterm_e
_initterm
_CrtDbgReportW
_CrtSetCheckCount
__initenv
_cexit
_XcptFilter
_exit
__getmainargs
_amsg_exit
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_CRT_RTC_INITW
__iob_func
fflush
exit
free
printf
scanf
_lock
malloc
_getche

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
FreeLibrary
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
IsDebuggerPresent
WideCharToMultiByte
UnhandledExceptionFilter

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8feb8efd3841509bcbc586a5122e2dcf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr100d

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 948B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 896B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 948B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 896B