4ef9e85c95779eddf946af0b71fae5b0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4ef9e85c95779eddf946af0b71fae5b0_NeikiAnalytics.exe
Size

124KB
MD5

4ef9e85c95779eddf946af0b71fae5b0
SHA1

c120da06313119afc0bbb8be447ded38f9fa4307
SHA256

e304db89c247fc6e465c13fed907cedb9b78440681677261d1791dee7b810af7
SHA512

9f384a9dda9a7f3627c46ec6cd3ccc4f84ed6549234cdd64e74b234c6b3a34fe9e2831f148d3f8f173f21f3a9307cac49842f376b3effb212f72bb001035277a
SSDEEP

1536:COil48txE+lyMRBEUdIefPf8yI8fL0Qemm:y41Q/uefPbwQe5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ef9e85c95779eddf946af0b71fae5b0_NeikiAnalytics.exe

Files

4ef9e85c95779eddf946af0b71fae5b0_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x64 arch:x64

cf24f8aed71c2542467fdebc760c9dac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
LoadLibraryW
LoadResource
MultiByteToWideChar
SizeofResource

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen

Exports

Exports

DirectPlayVoiceCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 368B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf24f8aed71c2542467fdebc760c9dac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

ucrtbase

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 288B

.rodata Size: 4KB - Virtual size: 28B

.rdata Size: 28KB - Virtual size: 27KB

.pdata Size: 4KB - Virtual size: 852B

.xdata Size: 4KB - Virtual size: 752B

.bss Size: - Virtual size: 368B

.edata Size: 52KB - Virtual size: 49KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 144B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 288B

.rodata
Size: 4KB - Virtual size: 28B

.rdata
Size: 28KB - Virtual size: 27KB

.pdata
Size: 4KB - Virtual size: 852B

.xdata
Size: 4KB - Virtual size: 752B

.bss
Size: - Virtual size: 368B

.edata
Size: 52KB - Virtual size: 49KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 144B