1d0f68cee672348a9baef12c566b4310_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1d0f68cee672348a9baef12c566b4310_NeikiAnalytics.exe
Size

20KB
MD5

1d0f68cee672348a9baef12c566b4310
SHA1

94d7377903da39bdeeac3d6a6fc8d7480812fa8f
SHA256

2edf0f31b570435426bec8a98bf6183c21928538c0ad96ec47c81bc18f0e213e
SHA512

672f0c0e1c218254bcf0f83fc81f010289c5116d15e0b1b43d62621ba557eaefae19a13c908262a91c78f0ceff269de01191a9d9c2cab025360bf7d3ccde7482
SSDEEP

384:Wv1micR2y3RNUvirhrYNhbCpbngxfLWTPJ7jqtNhv43UAPvJn/f7I+:Wv1mi3y3RJxChbCpbIQPQtNhvoPJ/f7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d0f68cee672348a9baef12c566b4310_NeikiAnalytics.exe

Files

1d0f68cee672348a9baef12c566b4310_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

5d9f32def33469624e928bb41c07f71e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python37

PyImport_ImportModule
PyCapsule_GetPointer
PyLong_AsLong
PyType_IsSubtype
PyErr_Clear
PyCapsule_Type
PyExc_ImportError
PyErr_Print
PyObject_GetAttrString
PyErr_SetString
PyErr_Format
PyExc_AttributeError
PyFloat_AsDouble
PyExc_RuntimeError
PyErr_Occurred

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

_libm_sse2_exp_precise
_libm_sse2_sin_precise
_libm_sse2_tan_precise
_libm_sse2_cos_precise

Exports

Exports

PyInit_BndMPoleSymplectic4RadPass
trackFunction

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d9f32def33469624e928bb41c07f71e

Headers

DLL Characteristics

File Characteristics

Imports

python37

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 700B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 700B