6a1675ee946e073de51fc838eb3ae6d0_NeikiAnalytics[.]exe

General

Target

6a1675ee946e073de51fc838eb3ae6d0_NeikiAnalytics.exe
Size

492KB
MD5

6a1675ee946e073de51fc838eb3ae6d0
SHA1

e72b1b76d12b94bd1d8a6f11a5261ecd23d7ec85
SHA256

9592270daee064011d7b29afcf84646314d6d0f499f1b4f2d150a4c54b871139
SHA512

c10992917925a0b54ef4271bcefb7bed5d78197e7babdaafd38414c3d69b5e18c874f38e37385e7ac2ab9a19ad6f01ea30ec111977e7a25bd4145d41e974c8b6
SSDEEP

6144:890XrPMyp0ghZ6Xsq2kBeStGlDTZAJATLoHTS5FOgNOgIpFz/VONlV7ngRCDUd4q:TXTWgTww6e9ToXG5KFglV74R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a1675ee946e073de51fc838eb3ae6d0_NeikiAnalytics.exe

Files

6a1675ee946e073de51fc838eb3ae6d0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

582b6cfe30ef4fe4c626674630007ee6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
TerminateProcess
GetCurrentProcess
GetLocalTime
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
GetLastError
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RaiseException
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
LCMapStringA
LCMapStringW
SetEndOfFile
GetFileAttributesA

Exports

Exports

PSC

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

582b6cfe30ef4fe4c626674630007ee6

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 400KB - Virtual size: 399KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 48KB - Virtual size: 62KB

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 400KB - Virtual size: 399KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 48KB - Virtual size: 62KB

.reloc
Size: 28KB - Virtual size: 25KB