41686e1ecfbe6c5d3073ce406c80d040_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

41686e1ecfbe6c5d3073ce406c80d040_NeikiAnalytics.exe
Size

914KB
MD5

41686e1ecfbe6c5d3073ce406c80d040
SHA1

b41825da97689eaf8c86b6f0130efa88f7936698
SHA256

60e268ce7e7952ec077683121e2b5d44a0622a4065893726fd60e128f39eee27
SHA512

8099a512ece3d09f0484759d4750f2dcec61ae65243436427b073fd4adbdc7c97a2adff0a5e9d735cc1cb6782b3b90db7fd012a5443e38f923a2b6f300e6381d
SSDEEP

12288:JvIvARupbHj6a/t+RayEuWFMWHjiGOuOykkvVjwdQZdaudcjN:mYRupbHj68t+RayQ/2GOukG9XZc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41686e1ecfbe6c5d3073ce406c80d040_NeikiAnalytics.exe

Files

41686e1ecfbe6c5d3073ce406c80d040_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

c4e29af97799324ad326f2c5dfb1a334

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\builds\build-sourcemod-msvc12\windows-1.12\OUTPUT\extensions\sdktools\sdktools.ext.2.ep2\windows-x86\sdktools.ext.2.ep2.pdb

Imports

kernel32

VirtualQuery
RtlPcToFileHeader
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
IsBadReadPtr
IsBadWritePtr
WriteConsoleW
SetEndOfFile
MultiByteToWideChar
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
CloseHandle
WaitForSingleObjectEx
SwitchToThread
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
SetEnvironmentVariableW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetTimeZoneInformation
HeapReAlloc
DecodePointer
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CreateFileW
HeapSize
ReadFile
ReadConsoleW

tier0

GetCPUInformation
g_pMemAlloc
AssertValidStringPtr
_AssertValidWritePtr

Exports

Exports

CreateInterface_MMS
GetSMExtAPI
cvar
g_pCVar

Sections

.text
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 513KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4e29af97799324ad326f2c5dfb1a334

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

tier0

Exports

Exports

Sections

.text Size: 339KB - Virtual size: 338KB

.rdata Size: 513KB - Virtual size: 512KB

.data Size: 34KB - Virtual size: 132KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 339KB - Virtual size: 338KB

.rdata
Size: 513KB - Virtual size: 512KB

.data
Size: 34KB - Virtual size: 132KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 25KB - Virtual size: 25KB