4ab576c48880afeeba35a77da5a09db0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4ab576c48880afeeba35a77da5a09db0_NeikiAnalytics.exe
Size

678KB
MD5

4ab576c48880afeeba35a77da5a09db0
SHA1

6f75b804011cca8772c52332258835927f12237a
SHA256

d05b2908ba957b45618f3489388807dd3379ee92966fb9ebb462a682d3a1f5e4
SHA512

604e1950bd5cc3de0c1ffa947b6cd0ca30db280a9c3c7b1e08f97ae8293767f60be06c64f71be7c2824b16fe8cccca540b78daec699def1f54ec0959a07ddab4
SSDEEP

12288:uAqtTs+hGHx6kdeLYqdWwwlIwIEO/ekUvn4pAa3Y/eJKiUdJL59S/vTuE:uAYTswGHEkdeLYqEwwurEOWkUv4p7cGp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab576c48880afeeba35a77da5a09db0_NeikiAnalytics.exe

Files

4ab576c48880afeeba35a77da5a09db0_NeikiAnalytics.exe
.exe windows:10 windows x86 arch:x86

d3420c3c9d1ee443c8706ce9ddf85614

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxc.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
_initterm

api-ms-win-crt-private-l1-1-0

_o__callnewh
_o__cexit
_o__configthreadlocale
_o__configure_wide_argv
_o__controlfp_s
_o__crt_atexit
_o__errno
_o__exit
_o__get_initial_wide_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__recalloc
_o__register_onexit_function
_o__set_app_type
memmove
_o__set_new_mode
_o_calloc
_o_ceil
_o_exit
_o_free
_o_malloc
_o_strtoul
_o_terminate
_o_tolower
_except_handler4_common
_o___stdio_common_vsprintf_s
__CxxFrameHandler3
_CxxThrowException
_o___stdio_common_vfprintf
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o___p___wargv
_o___p___argc
_o___acrt_iob_func
memchr
memcmp
memcpy
_o__seh_filter_exe
_o__set_fmode

api-ms-win-crt-string-l1-1-0

memset

kernel32

InitOnceExecuteOnce
FormatMessageW
InitializeCriticalSectionAndSpinCount
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
WriteFile
CreateFileW
GetLastError
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap

oleaut32

SysStringLen
VariantClear
VariantInit
SysFreeString

ole32

CoTaskMemFree
CoTaskMemAlloc
CoGetMalloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

api-ms-win-core-console-l1-1-0

GetConsoleOutputCP

api-ms-win-core-file-l1-1-0

GetFileSizeEx
ReadFile

api-ms-win-core-heap-l1-1-0

HeapReAlloc
HeapSize

api-ms-win-core-localization-l1-2-0

FormatMessageA

api-ms-win-core-processthreads-l1-1-0

TlsAlloc
TlsSetValue
TlsFree
TlsGetValue

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 572KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d3420c3c9d1ee443c8706ce9ddf85614

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

oleaut32

ole32

version

api-ms-win-core-console-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-synch-l1-1-0

Sections

.text Size: 98KB - Virtual size: 97KB

.data Size: 2KB - Virtual size: 3KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 572KB - Virtual size: 576KB

.text
Size: 98KB - Virtual size: 97KB

.data
Size: 2KB - Virtual size: 3KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 572KB - Virtual size: 576KB