0b66deb7d24246bcc44220df51ae4540_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

0b66deb7d24246bcc44220df51ae4540_NeikiAnalytics.exe
Size

664KB
MD5

0b66deb7d24246bcc44220df51ae4540
SHA1

d8399ee6b34a95e9968acff978e574b9c3c91353
SHA256

96a816c7b95a26e7bd93e0df3963075bbd4fba05f677755eececd953db0b6fc8
SHA512

37fa61918fa3c7edfdae6b650f953bda898cdbb9b6a59387c00f45df867261dc07c8d408db1470cbe3948adc868baf87696a569d2e621556600d1d056f3e6f61
SSDEEP

6144:6851GBxx3g3QHeggaeGAzCpFuSU8QqPdr5QD8q6/CD7r7fIMHMSS5SeifZrmpYDs:6/BxlHIGxFuSvz5EQMHi4ZYYDvtxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b66deb7d24246bcc44220df51ae4540_NeikiAnalytics.exe

Files

0b66deb7d24246bcc44220df51ae4540_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x86 arch:x86

afb107dae1a63650110a51ba0363ed45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceA
FindResourceW
GetEnvironmentVariableW
GetFileSize
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
LoadLibraryW
LoadResource
LockResource
MapViewOfFile
MultiByteToWideChar
SizeofResource
UnmapViewOfFile
WriteFile

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsscanf
_strdup
_stricmp
_strnicmp
free
fwrite
getenv
isprint
memcmp
memcpy
memmove
memset
strchr
strcmp
strcpy
strcspn
strlen

Exports

Exports

DirectXFileCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 196B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 255B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afb107dae1a63650110a51ba0363ed45

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

ucrtbase

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.data Size: 4KB - Virtual size: 144B

.rodata Size: 4KB - Virtual size: 220B

.rdata Size: 52KB - Virtual size: 49KB

/4 Size: 4KB - Virtual size: 164B

.bss Size: - Virtual size: 196B

.edata Size: 4KB - Virtual size: 255B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

/14 Size: 4KB - Virtual size: 368B

/29 Size: 248KB - Virtual size: 245KB

/41 Size: 12KB - Virtual size: 8KB

/55 Size: 36KB - Virtual size: 34KB

/67 Size: 8KB - Virtual size: 5KB

/80 Size: 4KB - Virtual size: 1KB

/91 Size: 52KB - Virtual size: 51KB

/102 Size: 12KB - Virtual size: 8KB

.text
Size: 44KB - Virtual size: 41KB

.data
Size: 4KB - Virtual size: 144B

.rodata
Size: 4KB - Virtual size: 220B

.rdata
Size: 52KB - Virtual size: 49KB

/4
Size: 4KB - Virtual size: 164B

.bss
Size: - Virtual size: 196B

.edata
Size: 4KB - Virtual size: 255B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

/14
Size: 4KB - Virtual size: 368B

/29
Size: 248KB - Virtual size: 245KB

/41
Size: 12KB - Virtual size: 8KB

/55
Size: 36KB - Virtual size: 34KB

/67
Size: 8KB - Virtual size: 5KB

/80
Size: 4KB - Virtual size: 1KB

/91
Size: 52KB - Virtual size: 51KB

/102
Size: 12KB - Virtual size: 8KB