713477db8b7c5448cd3b120657785e10_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
713477db8b7c5448cd3b120657785e10_NeikiAnalytics.exe
Size 540KB
Sample240613-lnf6jaxcnl
SHA256 0d6dd46256d85d2af8b03f088ec053790c4816646b906059c2ae676275150925
MD5 713477db8b7c5448cd3b120657785e10
SHA1 87f7d5369e513e717e4939b039715fbdd573c7f7
SHA512 74b0b19a7d82d2c571f18ae4a632495eff5daab94985a39fab2a2a75ad710a86e5670c82eeb2df942455de483243063df0920828de0cf67cc391a1df07b5f474
SSDEEP 6144:PzyH3lefZSa1ewBf/zfmVJCOFmSg0S/gS4Y9YZ3WaSWb+/SnSpSoSHMiSaS1SpFO:PGQfZSa1ew9ja4UV/285BQ0E1r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713477db8b7c5448cd3b120657785e10_NeikiAnalytics.exe

File Explorer

713477db8b7c5448cd3b120657785e10_NeikiAnalytics.exe

.dll 540KB

713477db8b7c5448cd3b120657785e10_NeikiAnalytics.exe

IMPHASH 7ad5263f9ae35285de93c521d4733008
SHA256 0d6dd46256d85d2af8b03f088ec053790c4816646b906059c2ae676275150925
MD5 713477db8b7c5448cd3b120657785e10
SHA1 87f7d5369e513e717e4939b039715fbdd573c7f7
SHA512 74b0b19a7d82d2c571f18ae4a632495eff5daab94985a39fab2a2a75ad710a86e5670c82eeb2df942455de483243063df0920828de0cf67cc391a1df07b5f474
SSDEEP 6144:PzyH3lefZSa1ewBf/zfmVJCOFmSg0S/gS4Y9YZ3WaSWb+/SnSpSoSHMiSaS1SpFO:PGQfZSa1ew9ja4UV/285BQ0E1r
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

kernel32

AddAtomA FindAtomA GetAtomNameA

msvcr71

__dllonexit _assert _errno _ftime acos ceil clock cos exp fflush floor fmod free log malloc memcpy pow sqrt

msvcrt

abort memset

python25

PyCObject_AsVoidPtr PyCObject_Type PyCode_New PyDict_GetItem PyDict_New PyDict_Next PyDict_SetItem PyDict_Size PyErr_Clear PyErr_ExceptionMatches PyErr_Fetch PyErr_Format PyErr_GivenExceptionMatches PyErr_NormalizeException PyErr_Occurred PyErr_Print PyErr_Restore PyErr_SetString PyErr_WarnEx PyErr_WriteUnraisable PyExc_AttributeError PyExc_BaseException PyExc_ImportError PyExc_NameError PyExc_OverflowError PyExc_RuntimeError PyExc_StopIteration PyExc_SystemError PyExc_TypeError PyExc_ValueError PyExc_ZeroDivisionError PyFloat_AsDouble PyFloat_FromDouble PyFloat_Type PyFrame_New PyGILState_Ensure PyGILState_Release PyImport_AddModule PyImport_Import PyImport_ImportModule PyInt_AsLong PyInt_AsSsize_t PyInt_FromLong PyInt_FromSsize_t PyInt_Type PyList_Append PyList_AsTuple PyList_New PyList_Type PyLong_AsLong PyLong_AsLongLong PyLong_AsUnsignedLong PyLong_AsUnsignedLongLong PyLong_Type PyMem_Free PyMem_Malloc PyMem_Realloc PyModule_GetDict PyNumber_Add PyNumber_InPlaceAdd PyNumber_InPlaceDivide PyNumber_Index PyNumber_Int PyNumber_Long PyNumber_Multiply PyNumber_Subtract PyOS_snprintf PyObject_Call PyObject_CallFunctionObjArgs PyObject_GetAttr PyObject_GetAttrString PyObject_GetItem PyObject_GetIter PyObject_HasAttr PyObject_IsInstance PyObject_IsTrue PyObject_RichCompare PyObject_SetAttr PyObject_SetAttrString PyObject_SetItem PyObject_Size PySlice_New PyString_AsString PyString_FromFormat PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_Type PyTraceBack_Here PyTraceBack_Type PyTuple_New PyTuple_Pack PyTuple_Type PyType_IsSubtype PyType_Ready PyType_Type PyUnicodeUCS2_Compare PyUnicodeUCS2_DecodeUTF8 PyUnicode_Type Py_GetVersion Py_InitModule4 _PyString_Eq _PyThreadState_Current _Py_EllipsisObject _Py_NoneStruct _Py_TrueStruct _Py_ZeroStruct

Name

.text

Size

235KB

Virtual Size

235KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

206KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

713477db8b7c5448cd3b120657785e10_NeikiAnalytics.exe

advapi32

kernel32

msvcr71

msvcrt

python25

generic