19f3522fde409a8ee1e12403c28eebb0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

19f3522fde409a8ee1e12403c28eebb0_NeikiAnalytics.exe
Size

540KB
MD5

19f3522fde409a8ee1e12403c28eebb0
SHA1

e1d0e5e15a7f7a94c37c6bd127b95c10db8a0417
SHA256

26c53c412ecf72ef79da4f49412478110601691e98ae79ab9d405dbe00b60ab9
SHA512

b7c618ee4fdfba7c83bd5f1565790e7de99f35d2b431c467bf717215fa471ea036706d78ac7b29f8e85d083d9ee92c0c08a59d3e8b0667bb9f1d9b327c4158af
SSDEEP

6144:Fi05kH9OyU2uv5SRf/FWgFgtYgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukTS:QrHGPv5SmptFDmUWuVZkxikdXcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19f3522fde409a8ee1e12403c28eebb0_NeikiAnalytics.exe

Files

19f3522fde409a8ee1e12403c28eebb0_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x64 arch:x64

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xbpbxnxouib8mt

Imports

mprapi

MprAdminInterfaceTransportAdd

user32

GetDoubleClickTime

kernel32

GetBinaryTypeW
SetLastError
GetCurrentThreadId
MulDiv
ExitProcess
EnumResourceTypesA
GetModuleHandleA
GetModuleFileNameW
CreateDirectoryA
GetLastError

crypt32

CryptFreeOIDFunctionAddress

winmm

midiInReset

Exports

Exports

?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sbss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xlhmxa
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iwx
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aoudkh
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jkxby
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qdope
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lgayck
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ikvgal
Size: 4KB - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.emlt
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ugno
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grxlc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mprapi

user32

kernel32

crypt32

winmm

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.code Size: 12KB - Virtual size: 8KB

.sbss Size: 4KB - Virtual size: 1KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 80KB - Virtual size: 76KB

.pdata Size: 4KB - Virtual size: 360B

.crt Size: 160KB - Virtual size: 158KB

DATA Size: 44KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 996B

.xlhmxa Size: 8KB - Virtual size: 4KB

.iwx Size: 4KB - Virtual size: 2KB

.aoudkh Size: 4KB - Virtual size: 2KB

.jkxby Size: 4KB - Virtual size: 1KB

.qdope Size: 28KB - Virtual size: 27KB

.lgayck Size: 4KB - Virtual size: 1KB

.ikvgal Size: 4KB - Virtual size: 268B

.emlt Size: 4KB - Virtual size: 571B

.ugno Size: 4KB - Virtual size: 1KB

.grxlc Size: 28KB - Virtual size: 27KB

.text
Size: 4KB - Virtual size: 1KB

.code
Size: 12KB - Virtual size: 8KB

.sbss
Size: 4KB - Virtual size: 1KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 80KB - Virtual size: 76KB

.pdata
Size: 4KB - Virtual size: 360B

.crt
Size: 160KB - Virtual size: 158KB

DATA
Size: 44KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 996B

.xlhmxa
Size: 8KB - Virtual size: 4KB

.iwx
Size: 4KB - Virtual size: 2KB

.aoudkh
Size: 4KB - Virtual size: 2KB

.jkxby
Size: 4KB - Virtual size: 1KB

.qdope
Size: 28KB - Virtual size: 27KB

.lgayck
Size: 4KB - Virtual size: 1KB

.ikvgal
Size: 4KB - Virtual size: 268B

.emlt
Size: 4KB - Virtual size: 571B

.ugno
Size: 4KB - Virtual size: 1KB

.grxlc
Size: 28KB - Virtual size: 27KB