976dd5ca0980f9c5f191d36d6a2d7160_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

976dd5ca0980f9c5f191d36d6a2d7160_NeikiAnalytics.exe
Size

92KB
MD5

976dd5ca0980f9c5f191d36d6a2d7160
SHA1

4251c7dcd9c978962cc7cd66964f1c2869286072
SHA256

c76a3393587032c1e80a087e0b86e1d84fcb18f49eb60b2b97e230b14a56cdf7
SHA512

5ea3e3a447690a4c81c0407195a29f60086fc7ad7a8362ba5f110379ca39a109aa176476b960f14cc29060d189f68615eef81ec55c87dc52cc724cc963c2d3d7
SSDEEP

1536:YuBEf5ugzekKoErnE6o1ujT4CpXl8PfROwt:YiEf5ug+VjE4CROw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
976dd5ca0980f9c5f191d36d6a2d7160_NeikiAnalytics.exe

Files

976dd5ca0980f9c5f191d36d6a2d7160_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

a0443beb0675c7d8d90b3a825906307b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\projects\Search Enhancement Tool\Sniffer\Release\Sniffer.pdb

Imports

wininet

InternetSetOptionW

kernel32

WideCharToMultiByte
WriteFile
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
HeapFree
HeapAlloc
GetCommandLineW
ReleaseMutex
CreateEventW
CreateMutexW
GetModuleFileNameW
CloseHandle
MultiByteToWideChar
lstrlenA
GetLastError
SetStdHandle
LoadLibraryA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameA
ExitProcess
CreateFileA
GetModuleHandleA
FlushFileBuffers
SetFilePointer
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
HeapDestroy
HeapReAlloc
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetCommandLineA
GetStartupInfoA
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetConsoleCP
GetConsoleMode

user32

SetTimer
PeekMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
PostQuitMessage

shell32

CommandLineToArgvW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAppendW

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0443beb0675c7d8d90b3a825906307b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 752B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 752B

.reloc
Size: 10KB - Virtual size: 9KB