3b934220c1c9bdd101d3b2786884f500_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3b934220c1c9bdd101d3b2786884f500_NeikiAnalytics.exe
Size

319KB
MD5

3b934220c1c9bdd101d3b2786884f500
SHA1

208222ce3d7abc75e593b194ad89f80e6b4579eb
SHA256

c9a6dcc7508077c9d2179afea24d8903f8c60690ffce9e9b95c57160201aff34
SHA512

95d5a1d642d4e304288e44e9daff9d1324411537802db55ec947c593f75124f822e119cfecb1ec5b50b2759d06b2ca3fd7da2e7eb76a1005be717f79429a3842
SSDEEP

6144:zjQFD3MY+5LLX4OkZKjkumIoZIGSJUtZnmdVSC9B7pO:CD3MY+mEjkuJqm37p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b934220c1c9bdd101d3b2786884f500_NeikiAnalytics.exe

Files

3b934220c1c9bdd101d3b2786884f500_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

bde3a178ccd15850ff70041095be9ea2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
WriteFile
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
InitializeCriticalSection
GetCurrentProcess
TerminateProcess
HeapFree
GetLastError
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
GetCurrentThreadId
GetThreadLocale
LoadLibraryA
HeapSize
FormatMessageA

3delight

SxCreateContext
SxGetNumParameters
SxGetParameterInfo
SxSetParameter
SxCreateShader
SxDestroyContext
SxCreateParameterList
SxSetPredefinedParameter
SxCallShader
SxDestroyParameterList
SxGetParameter
SxGetPredefinedParameters
SxSetErrorHandler
SX_RSLPLUGIN_PARENT_CONTEXT

Exports

Exports

RslPublicFunctions

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bde3a178ccd15850ff70041095be9ea2

Headers

File Characteristics

Imports

kernel32

3delight

Exports

Exports

Sections

.text Size: 215KB - Virtual size: 215KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 10KB - Virtual size: 21KB

.pdata Size: 7KB - Virtual size: 6KB

.data1 Size: 30KB - Virtual size: 30KB

.trace Size: 6KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 215KB - Virtual size: 215KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 10KB - Virtual size: 21KB

.pdata
Size: 7KB - Virtual size: 6KB

.data1
Size: 30KB - Virtual size: 30KB

.trace
Size: 6KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 5KB