4a5b393ac2ef7d5c04c092b000cc8560_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4a5b393ac2ef7d5c04c092b000cc8560_NeikiAnalytics.exe
Size

507KB
MD5

4a5b393ac2ef7d5c04c092b000cc8560
SHA1

2c225af882f63e42b8dfb1b910efec2823f5046c
SHA256

e9f335a2e456f601c1d8479d82c2a50340c4582bbdbc5b9ed784d5c27366cf64
SHA512

3589dc26ae0d57fa494bf5189ec683b3760fc92003110052bd14fa07629e13cb91de123025cee332ae243abfbff1d8d208001805638a4ce33dbf511b50bd56bb
SSDEEP

6144:ghoS49FC1BYUc7OfkIF+HgD3AdQfZFung7fTPZ71cH1KrkNz1ndhQzKQw2WyqEDw:S49Ev+FW3Wg7fTPZQKa1/Qz5amxM6U7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5b393ac2ef7d5c04c092b000cc8560_NeikiAnalytics.exe

Files

4a5b393ac2ef7d5c04c092b000cc8560_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

30fe413aeb44107ef8ec1daa23db3f07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FindAtomA
GetAtomNameA
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
Sleep

msvcrt

__dllonexit
_assert
_errno
_iob
abort
atoi
fclose
fflush
fgetc
fopen
fputc
fread
free
fseek
ftell
fwrite
malloc
memcpy
memset
strlen
strncmp

ws2_32

ntohl

libcurl

curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_easy_setopt

libeay32

BIO_ctrl
BIO_f_base64
BIO_free
BIO_free_all
BIO_new
BIO_new_mem_buf
BIO_push
BIO_read
BIO_s_mem
BIO_write
ERR_free_strings
ERR_load_crypto_strings
EVP_PKEY_free
EVP_PKEY_get1_RSA
EVP_cleanup
OPENSSL_add_all_algorithms_noconf
PEM_read_bio_PUBKEY
PEM_read_bio_PrivateKey
PEM_read_bio_X509
RAND_bytes
RSA_free
RSA_size
RSA_verify
SHA512
X509_free
X509_get_pubkey

Exports

Exports

libascli_get_profile_flags_file
libascli_get_profile_flags_mem
libascli_get_profile_name_file
libascli_get_profile_name_mem
libascli_get_user_profile_file
libascli_get_user_profile_mem
libascli_get_var_file
libascli_get_var_mem
libascli_init_openssl
libascli_msi_extract
libascli_read_string_from_file
libascli_trust_user_profile_file
libascli_trust_user_profile_mem
libascli_uninit_openssl
libascli_write_string_to_file

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stab
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

30fe413aeb44107ef8ec1daa23db3f07

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

libcurl

libeay32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 128B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 624B

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 792B

.stab Size: 81KB - Virtual size: 81KB

.stabstr Size: 370KB - Virtual size: 369KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 128B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 624B

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 792B

.stab
Size: 81KB - Virtual size: 81KB

.stabstr
Size: 370KB - Virtual size: 369KB