111a33c483ff180d16aae07dbe504690_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

111a33c483ff180d16aae07dbe504690_NeikiAnalytics.exe
Size

586KB
MD5

111a33c483ff180d16aae07dbe504690
SHA1

23adca857b1f5b225de11dcbd61bfcc999e6b5af
SHA256

59f2b9fa4ef591447b3ad59d96f3225966b07682b125aac4382fd60e06e38d21
SHA512

ee8fc5d10d42d0d5fb87331b489942848baf665fbf131557d829a517ea113578bf66f420a6cdabe977f35a2a2dc78766732ec96dbbf67cccefe9573bf0d0327c
SSDEEP

12288:8aSAATj5QDTCERBxt31oAIEdHgwpr1RiaOFFDY1HJWePauh2nI7H5fOc9KF9Fm4O:NfD1M/m520U5LNoCqi+h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
111a33c483ff180d16aae07dbe504690_NeikiAnalytics.exe

Files

111a33c483ff180d16aae07dbe504690_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

764b82260ee7fab77285cdc94a1fa28c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\wag\mozilla\comm-253\sm32-obj\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb

Imports

nss3

NSS_SecureMemcmp
NSS_SecureMemcmpZero
PORT_Alloc_Util
PORT_ArenaAlloc_Util
PORT_ArenaZAlloc_Util
PORT_FreeArena_Util
PORT_Free_Util
PORT_GetError_Util
PORT_NewArena_Util
PORT_SetError_Util
PORT_ZAllocAlignedOffset_Util
PORT_ZAlloc_Util
PORT_ZFree_Util
PR_CallOnce
PR_DestroyCondVar
PR_DestroyLock
PR_GetEnvSecure
PR_Lock
PR_NewCondVar
PR_NewLock
PR_NotifyAllCondVar
PR_NotifyCondVar
PR_Unlock
PR_WaitCondVar
SECITEM_AllocItem_Util
SECITEM_CompareItem_Util
SECITEM_CopyItem_Util
SECITEM_FreeItem_Util
SECITEM_ZfreeItem_Util
SECOID_FindOIDTag_Util

advapi32

SystemFunction036

kernel32

DisableThreadLibraryCalls
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetLogicalDrives
GetSystemTimeAsFileTime
GetTickCount
GetVolumeInformationA
GlobalMemoryStatus
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memcmp
memcpy
memmove
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
abort

api-ms-win-crt-string-l1-1-0

_strdup
strlen

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

Exports

Exports

FREEBL_GetVector

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

764b82260ee7fab77285cdc94a1fa28c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

nss3

advapi32

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 445KB - Virtual size: 444KB

.rdata Size: 129KB - Virtual size: 129KB

.data Size: 512B - Virtual size: 17KB

.00cfg Size: 512B - Virtual size: 4B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 445KB - Virtual size: 444KB

.rdata
Size: 129KB - Virtual size: 129KB

.data
Size: 512B - Virtual size: 17KB

.00cfg
Size: 512B - Virtual size: 4B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 8KB - Virtual size: 8KB