0e15e90ec9b24759e4655383c60e91c0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0e15e90ec9b24759e4655383c60e91c0_NeikiAnalytics.exe
Size

121KB
MD5

0e15e90ec9b24759e4655383c60e91c0
SHA1

5f0f812528894ad180ae75ea9beb707f440153a3
SHA256

5dba2711e0db522ce315487c5c2f43ce2bb137b2795119258cab200f7df4aa65
SHA512

dcd37217cae3536255e13137c66d1ad11ec41328d96285910ee6f44e989da167d2b245f34ac8b7ca7ef16f029f18339a70bfeb2b2ef36b069329de618de52532
SSDEEP

768:IYVAkZrXKJD5mOch9NV57ra0SOnops6AMEcydGEUnk9OXeu4eKOaI69:bX+Z47rnops6AsREs4g69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e15e90ec9b24759e4655383c60e91c0_NeikiAnalytics.exe

Files

0e15e90ec9b24759e4655383c60e91c0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

65774ef3da50d066f6cc1d3f6c0127fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetObjectType

kernel32

DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
RaiseException

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen

Exports

Exports

OleActivate
OleClone
OleClose
OleCopyFromLink
OleCopyToClipboard
OleCreate
OleCreateFromClip
OleCreateFromFile
OleCreateFromTemplate
OleCreateInvisible
OleCreateLinkFromClip
OleCreateLinkFromFile
OleDelete
OleDraw
OleEnumFormats
OleEnumObjects
OleEqual
OleExecute
OleGetData
OleGetLinkUpdateOptions
OleIsDcMeta
OleLoadFromStream
OleLockServer
OleObjectConvert
OleQueryBounds
OleQueryClientVersion
OleQueryCreateFromClip
OleQueryLinkFromClip
OleQueryName
OleQueryOpen
OleQueryOutOfDate
OleQueryProtocol
OleQueryReleaseError
OleQueryReleaseMethod
OleQueryReleaseStatus
OleQuerySize
OleQueryType
OleReconnect
OleRegisterClientDoc
OleRelease
OleRename
OleRenameClientDoc
OleRequestData
OleRevertClientDoc
OleRevokeClientDoc
OleSaveToStream
OleSavedClientDoc
OleSetBounds
OleSetColorScheme
OleSetData
OleSetHostNames
OleSetLinkUpdateOptions
OleSetTargetDevice
OleUnlockServer
OleUpdate
WEP

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65774ef3da50d066f6cc1d3f6c0127fb

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

ntdll

ucrtbase

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 80B

.rodata Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 768B

/4 Size: 4KB - Virtual size: 1KB

.bss Size: - Virtual size: 192B

.edata Size: 4KB - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 768B

.reloc Size: 4KB - Virtual size: 512B

/14 Size: 4KB - Virtual size: 160B

/29 Size: 28KB - Virtual size: 24KB

/41 Size: 4KB - Virtual size: 2KB

/55 Size: 8KB - Virtual size: 4KB

/67 Size: 4KB - Virtual size: 1KB

/80 Size: 4KB - Virtual size: 186B

/91 Size: 8KB - Virtual size: 4KB

/102 Size: 4KB - Virtual size: 800B

.text
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 80B

.rodata
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 768B

/4
Size: 4KB - Virtual size: 1KB

.bss
Size: - Virtual size: 192B

.edata
Size: 4KB - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 768B

.reloc
Size: 4KB - Virtual size: 512B

/14
Size: 4KB - Virtual size: 160B

/29
Size: 28KB - Virtual size: 24KB

/41
Size: 4KB - Virtual size: 2KB

/55
Size: 8KB - Virtual size: 4KB

/67
Size: 4KB - Virtual size: 1KB

/80
Size: 4KB - Virtual size: 186B

/91
Size: 8KB - Virtual size: 4KB

/102
Size: 4KB - Virtual size: 800B