3353967e76632b5b71f14ae047575f80_NeikiAnalytics[.]exe

General

Target

3353967e76632b5b71f14ae047575f80_NeikiAnalytics.exe
Size

14KB
MD5

3353967e76632b5b71f14ae047575f80
SHA1

4f0834a73da38b60f0a15eb645f1c3738f675c26
SHA256

2786368b05527b9d22c5cdeb2cc466a295f63de637a5eb2023ff7226fd743220
SHA512

ac0f4cb005bf95291a7b8c5045776daafbab30f3aa8b990d24d1c562f30d98a6533da9a817178dabad56218eea3492f2700edaee883e7da028cfa2f8ee85de64
SSDEEP

192:X1AT9za2cyR6zDtNPQ8QoqFESQiBR2GB0JZL:X1ABzcykzRVQ9FbfKJZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3353967e76632b5b71f14ae047575f80_NeikiAnalytics.exe

Files

3353967e76632b5b71f14ae047575f80_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

6dd91b2f13ce963e443e7c8ef2ac78f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\s5vi\Downloads\PHONES\WP\mtp-com\sonyflashmode\Release\WpdApiSample.pdb

Imports

shlwapi

StrStrW

kernel32

DecodePointer
GetSystemTimeAsFileTime
HeapSetInformation
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

msvcr110

printf
__CxxFrameHandler3
wprintf
_wcsdup
??_V@YAXPAX@Z
memset
_XcptFilter
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
??3@YAXPAX@Z
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__winitenv
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
??2@YAPAXI@Z
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
_cexit

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dd91b2f13ce963e443e7c8ef2ac78f5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

ole32

msvcr110

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 842B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 842B