6f5d335ced6bf906f48130351eaea370_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6f5d335ced6bf906f48130351eaea370_NeikiAnalytics.exe
Size

446KB
MD5

6f5d335ced6bf906f48130351eaea370
SHA1

1113df0e466da8525c18cafa0a7384b7c306eb4f
SHA256

dd2bc3f8366cd4f89e70cd3b93d0b98911bb3b702d653278b170c4627b0355cc
SHA512

c62117946158795d96486876f8b2e7a7d4b00c8fd426574429848b5fe30beb343884514b67352019c61f7e6756a48e38c782e933acbf42ca86f0b334551568e4
SSDEEP

3072:TBE6o8qalYozMP+cR9X5QE6Q7sP6VdrFlQ3ArcQHAQs/MllG+GU:VPHlYo4DRReE6Q7sSdrTQ3ArjHg/+vGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f5d335ced6bf906f48130351eaea370_NeikiAnalytics.exe

Files

6f5d335ced6bf906f48130351eaea370_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x86 arch:x86

6fa5a2a1799d70bcc206ed07246c198f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegisterServiceCtrlHandlerExW
SetServiceStatus

kernel32

CloseHandle
CreateEventW
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
RaiseException
SetEvent
SizeofResource
WaitForSingleObject

ntdll

_vsnprintf

ole32

CoInitializeEx
CoInitializeSecurity
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen

Exports

Exports

DllRegisterServer
DllUnregisterServer
ServiceMain
wiasCreateChildAppItem
wiasCreateDrvItem
wiasCreateLogInstance
wiasCreatePropContext
wiasDebugError
wiasDebugTrace
wiasDownSampleBuffer
wiasFormatArgs
wiasFreePropContext
wiasGetChangedValueFloat
wiasGetChangedValueGuid
wiasGetChangedValueLong
wiasGetChangedValueStr
wiasGetChildrenContexts
wiasGetContextFromName
wiasGetDrvItem
wiasGetImageInformation
wiasGetItemType
wiasGetPropertyAttributes
wiasGetRootItem
wiasIsPropChanged
wiasParseEndorserString
wiasPrintDebugHResult
wiasQueueEvent
wiasReadMultiple
wiasReadPropBin
wiasReadPropFloat
wiasReadPropGuid
wiasReadPropLong
wiasReadPropStr
wiasSendEndOfPage
wiasSetItemPropAttribs
wiasSetItemPropNames
wiasSetPropChanged
wiasSetPropertyAttributes
wiasSetValidFlag
wiasSetValidListFloat
wiasSetValidListGuid
wiasSetValidListLong
wiasSetValidListStr
wiasSetValidRangeFloat
wiasSetValidRangeLong
wiasUpdateScanRect
wiasUpdateValidFormat
wiasValidateItemProperties
wiasWriteBufToFile
wiasWriteMultiple
wiasWritePageBufToFile
wiasWritePageBufToStream
wiasWritePropBin
wiasWritePropFloat
wiasWritePropGuid
wiasWritePropLong
wiasWritePropStr

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 228B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fa5a2a1799d70bcc206ed07246c198f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ntdll

ole32

ucrtbase

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 116B

.rodata Size: 4KB - Virtual size: 1KB

.rdata Size: 40KB - Virtual size: 36KB

/4 Size: 4KB - Virtual size: 1KB

.bss Size: - Virtual size: 228B

.edata Size: 4KB - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

/14 Size: 4KB - Virtual size: 312B

/29 Size: 164KB - Virtual size: 163KB

/41 Size: 8KB - Virtual size: 6KB

/55 Size: 12KB - Virtual size: 11KB

/67 Size: 4KB - Virtual size: 2KB

/80 Size: 4KB - Virtual size: 1KB

/91 Size: 16KB - Virtual size: 12KB

/102 Size: 4KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 116B

.rodata
Size: 4KB - Virtual size: 1KB

.rdata
Size: 40KB - Virtual size: 36KB

/4
Size: 4KB - Virtual size: 1KB

.bss
Size: - Virtual size: 228B

.edata
Size: 4KB - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

/14
Size: 4KB - Virtual size: 312B

/29
Size: 164KB - Virtual size: 163KB

/41
Size: 8KB - Virtual size: 6KB

/55
Size: 12KB - Virtual size: 11KB

/67
Size: 4KB - Virtual size: 2KB

/80
Size: 4KB - Virtual size: 1KB

/91
Size: 16KB - Virtual size: 12KB

/102
Size: 4KB - Virtual size: 2KB