19435f864749bdfb16f7b2612e04a020_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

19435f864749bdfb16f7b2612e04a020_NeikiAnalytics.exe
Size

134KB
MD5

19435f864749bdfb16f7b2612e04a020
SHA1

f6122d70fc2f7ff584f0091ece628ec39dbdadfb
SHA256

c8b18b72daabaf297833c24f05a69ce7da564c515e69e2710c5201a91c1e9e4f
SHA512

5ab1f3e323dc5c3b28a18eb3bcdebf49ebc095050afbdab0208a738f29b2dd881b1d80927472f83a46b9536a94e16e5326438ba5f220512058ee0c09bb0a0429
SSDEEP

1536:qjIC4nLS4EQ7hBz/g3V/6zveNYrcl1hxYJAGaqQTH9D8Cv57K/UVlkYiNFG2YV:uItnLVFz/aVcmOrcH8nQiCdhVpiNFG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19435f864749bdfb16f7b2612e04a020_NeikiAnalytics.exe

Files

19435f864749bdfb16f7b2612e04a020_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

04a0f7491678fe0d3283f870ba681626

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
StringFromGUID2

advapi32

RegOpenKeyExA
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCloseKey

kernel32

GetSystemTime
GetFileType
DeleteFileA
GetProcAddress
LoadLibraryW
UnmapViewOfFile
VirtualQuery
GetLocaleInfoA
EnumSystemLocalesA
IsDebuggerPresent
HeapDestroy
HeapAlloc
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
IsValidLocale
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
GetStringTypeW
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
GetLocaleInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
Sleep
HeapSize
HeapReAlloc
GetUserDefaultLCID

gdi32

CreateCompatibleDC
CreateFontIndirectW
DeleteDC
GetDeviceCaps
BitBlt

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04a0f7491678fe0d3283f870ba681626

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

kernel32

gdi32

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 3KB - Virtual size: 7KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 3KB - Virtual size: 7KB

.reloc
Size: 5KB - Virtual size: 5KB