8563b61ac0a6aa3e642997f2d3288cb0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8563b61ac0a6aa3e642997f2d3288cb0_NeikiAnalytics.exe
Size

2.0MB
MD5

8563b61ac0a6aa3e642997f2d3288cb0
SHA1

869bc8bb3df04b2b56a7b259dcb61eeae7a8ad05
SHA256

8a630d2a0492c3e1ea262630e9517478943038cfc984150d9615fec2ed8618d2
SHA512

75d2911defdeae411d3a16de348b672a1d429e9bfe4496432daedcaa78fdc706f817b26ae1ca5870518a661fe61288a73833576733b6a27e853c13d376a9516e
SSDEEP

49152:6/yudd5Rnq5y4Ytoc/XxIMz9csamy4hs4Gl14CO2nvb7a3pRSj8:6/X+YXiKRamy4hs4GfXO2vf4pRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8563b61ac0a6aa3e642997f2d3288cb0_NeikiAnalytics.exe

Files

8563b61ac0a6aa3e642997f2d3288cb0_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

985562fbdc0653f5f52888688bccc616

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vcruntime140

memcpy
memmove
memcmp
__CxxFrameHandler3
strrchr
memset
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_endthreadex
_beginthreadex
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateMutexW
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
CreateFileA
AreFileApisANSI
HeapCreate
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
CloseHandle
GetLastError
SetThreadStackGuarantee
WaitForSingleObject
Sleep
GetSystemInfo
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
FlushFileBuffers
SetFileInformationByHandle
GetCurrentProcess
SetFilePointerEx
GetStdHandle
TerminateProcess
GetSystemTimePreciseAsFileTime
HeapFree
HeapReAlloc
lstrlenW
ReleaseMutex
GetProcessHeap
HeapAlloc
FindClose
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
CreateDirectoryW
FindFirstFileW
DeleteFileW
MoveFileExW
ReadFile
GetConsoleMode
FormatMessageW
GetFileAttributesW
DeleteFileA
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
CreateThread
GetCurrentThread
GetFullPathNameW
GetModuleHandleA
GetProcAddress
GetTempPathW
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetTickCount
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
FreeLibrary
SystemTimeToFileTime
GetFileSize
LockFileEx
LocalFree
UnlockFile
HeapDestroy
HeapCompact
LoadLibraryW
SetFilePointer

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

ntdll

NtWriteFile
NtReadFile
RtlNtStatusToDosError

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

api-ms-win-crt-string-l1-1-0

strcmp
strncmp
strcspn
strlen

api-ms-win-crt-heap-l1-1-0

realloc
_msize
malloc
free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-math-l1-1-0

log

Exports

Exports

chewing_Configure
chewing_Init
chewing_KBStr2Num
chewing_Reset
chewing_Terminate
chewing_aux_Check
chewing_aux_Length
chewing_aux_String
chewing_aux_String_static
chewing_bopomofo_Check
chewing_bopomofo_String_static
chewing_buffer_Check
chewing_buffer_Len
chewing_buffer_String
chewing_buffer_String_static
chewing_cand_CheckDone
chewing_cand_ChoicePerPage
chewing_cand_CurrentPage
chewing_cand_Enumerate
chewing_cand_String
chewing_cand_String_static
chewing_cand_TotalChoice
chewing_cand_TotalPage
chewing_cand_choose_by_index
chewing_cand_close
chewing_cand_hasNext
chewing_cand_list_first
chewing_cand_list_has_next
chewing_cand_list_has_prev
chewing_cand_list_last
chewing_cand_list_next
chewing_cand_list_prev
chewing_cand_open
chewing_cand_string_by_index_static
chewing_clean_bopomofo_buf
chewing_clean_preedit_buf
chewing_commit_Check
chewing_commit_String
chewing_commit_String_static
chewing_commit_preedit_buf
chewing_config_get_int
chewing_config_get_str
chewing_config_has_option
chewing_config_set_int
chewing_config_set_str
chewing_cursor_Current
chewing_delete
chewing_free
chewing_get_ChiEngMode
chewing_get_KBString
chewing_get_KBType
chewing_get_ShapeMode
chewing_get_addPhraseDirection
chewing_get_autoLearn
chewing_get_autoShiftCur
chewing_get_candPerPage
chewing_get_easySymbolInput
chewing_get_escCleanAllBuf
chewing_get_hsuSelKeyType
chewing_get_maxChiSymbolLen
chewing_get_phoneSeq
chewing_get_phoneSeqLen
chewing_get_phraseChoiceRearward
chewing_get_selKey
chewing_get_spaceAsSelection
chewing_handle_Backspace
chewing_handle_Capslock
chewing_handle_CtrlNum
chewing_handle_DblTab
chewing_handle_Default
chewing_handle_Del
chewing_handle_Down
chewing_handle_End
chewing_handle_Enter
chewing_handle_Esc
chewing_handle_Home
chewing_handle_Left
chewing_handle_Numlock
chewing_handle_PageDown
chewing_handle_PageUp
chewing_handle_Right
chewing_handle_ShiftLeft
chewing_handle_ShiftRight
chewing_handle_ShiftSpace
chewing_handle_Space
chewing_handle_Tab
chewing_handle_Up
chewing_interval_Enumerate
chewing_interval_Get
chewing_interval_hasNext
chewing_kbtype_Enumerate
chewing_kbtype_String
chewing_kbtype_String_static
chewing_kbtype_Total
chewing_kbtype_hasNext
chewing_keystroke_CheckAbsorb
chewing_keystroke_CheckIgnore
chewing_new
chewing_new2
chewing_phone_to_bopomofo
chewing_set_ChiEngMode
chewing_set_KBType
chewing_set_ShapeMode
chewing_set_addPhraseDirection
chewing_set_autoLearn
chewing_set_autoShiftCur
chewing_set_candPerPage
chewing_set_easySymbolInput
chewing_set_escCleanAllBuf
chewing_set_hsuSelKeyType
chewing_set_logger
chewing_set_maxChiSymbolLen
chewing_set_phraseChoiceRearward
chewing_set_selKey
chewing_set_spaceAsSelection
chewing_userphrase_add
chewing_userphrase_enumerate
chewing_userphrase_get
chewing_userphrase_has_next
chewing_userphrase_lookup
chewing_userphrase_remove
chewing_zuin_Check
chewing_zuin_String

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

985562fbdc0653f5f52888688bccc616

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

shell32

ole32

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 261KB - Virtual size: 261KB

.data Size: 21KB - Virtual size: 24KB

.pdata Size: 66KB - Virtual size: 66KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 261KB - Virtual size: 261KB

.data
Size: 21KB - Virtual size: 24KB

.pdata
Size: 66KB - Virtual size: 66KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 7KB