9ef8b94b3b7fcaeb29ca035d52797af0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9ef8b94b3b7fcaeb29ca035d52797af0_NeikiAnalytics.exe
Size

211KB
MD5

9ef8b94b3b7fcaeb29ca035d52797af0
SHA1

4d35766adf08dc4d15bf6bbc1da5fb4d0d1db8b1
SHA256

ba2703d39369743913da88335ba09501cda3d0dbf9d9fff6aca2dfe842a29f95
SHA512

e07a675dc6881836c5851f654aad87dc69026575d15a21e682886c13378267fb05263eb13d570f03e091268b625f7eba141301e5c56ff8cfe382dd9696c17f5d
SSDEEP

6144:umHUmq/V84+ap8YQa1cNatYfZZGuBn88axl34v:fUmq/Vga6YQa1cNOYfZZGuB88Uy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ef8b94b3b7fcaeb29ca035d52797af0_NeikiAnalytics.exe

Files

9ef8b94b3b7fcaeb29ca035d52797af0_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

ec146620c6429a0a5c5110e0dcba4ea8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libx11

XSetArcMode
XCreatePixmapFromBitmapData
XGetDefault
XGetGCValues
XrmPermStringToQuark
XFillRectangles
XrmQGetResource
XrmGetDatabase
XFillRectangle
XQueryColors
XOpenDisplay
XGetWindowProperty
XInternAtom
XSync
XSetWMNormalHints
XDeleteProperty
XAllocSizeHints
XrmQuarkToString
XCreateGlyphCursor
XCreatePixmapCursor
XCreateFontCursor
XRecolorCursor
XrmSetDatabase
XrmStringToQuark
XCreateWindow
XDestroyWindow
XDrawLine
XDrawArc
XSetForeground
XChangeGC
XFillArc
XCreatePixmap
XGetWindowAttributes
XCreateGC
XFreeGC
XFreePixmap
XFillArcs
XChangeProperty
XMapSubwindows
XMapWindow
XrmMergeDatabases
XrmGetFileDatabase
XrmGetResource
XNextRequest
XFindContext
XrmUniqueQuark
XSaveContext
XDeleteContext
XSetSelectionOwner
XFlush
XSetErrorHandler
XSelectInput
XSendEvent
XConvertSelection
XMaxRequestSize
XGetSelectionOwner
XrmQGetSearchList
XrmQGetSearchResource
XConfigureWindow
XClearArea
XFreeFontSet
XScreenNumberOfScreen
XQueryFont
XDisplayOfScreen
XLoadQueryFont
XFreeStringList
XUnloadFont
XMatchVisualInfo
XQueryColor
XFreeFont
XLookupColor
XFreeCursor
XAllocNamedColor
XLoadFont
XCreateFontSet
XrmQPutResource
XResourceManagerString
XrmEnumerateDatabase
XrmCombineFileDatabase
XrmCombineDatabase
XScreenResourceString
XrmPutLineResource
XrmGetStringDatabase
XCheckIfEvent
XEventsQueued
XGetKeyboardMapping
XConvertCase
XFreeModifiermap
XGetModifierMapping
XGrabKey
XGrabButton
XUnmapWindow
XmbTextListToTextProperty
XSetCommand
XSetWMProperties
XIconifyWindow
XSetWMIconName
XTranslateCoordinates
XWMGeometry
XSetTransientForHint
XPutBackEvent
XSetWMHints
XChangeWindowAttributes
XSetWMName
XStringToKeysym
XKeysymToString
XRaiseWindow
XWithdrawWindow
XMapRaised
XFreeColors
XAddExtension
XESetCloseDisplay
XGetAtomName
XInternAtoms
XGetErrorText
XGetErrorDatabaseText
XFree

libxext

XShapeCombineMask

kernel32

SetErrorMode
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

ws2_32

WSAStartup
select
__WSAFDIsSet
gethostname

vcruntime140

memcpy
strrchr
strchr
__std_type_info_destroy_list
memmove
memset
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fclose
_getcwd
__stdio_common_vfprintf
fopen
fputs
__stdio_common_vsprintf
getc
__stdio_common_vsscanf
fgets

api-ms-win-crt-heap-l1-1-0

calloc
realloc
free
malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

strncmp
isxdigit
strncpy
isdigit
_strdup

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_getdrives
_access

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-runtime-l1-1-0

_errno
_initterm
_initterm_e
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
exit

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-time-l1-1-0

_ftime64

Exports

Exports

XmuAddInitializer
XmuAreaOrXor
XmuCallInitializers
XmuCompareISOLatin1
XmuConvertStandardSelection
XmuCreateStippledPixmap
XmuCvtBackingStoreToString
XmuCvtGravityToString
XmuCvtJustifyToString
XmuCvtOrientationToString
XmuCvtShapeStyleToString
XmuCvtStringToBackingStore
XmuCvtStringToBitmap
XmuCvtStringToColorCursor
XmuCvtStringToCursor
XmuCvtStringToGravity
XmuCvtStringToJustify
XmuCvtStringToOrientation
XmuCvtStringToShapeStyle
XmuCvtWidgetToString
XmuDestroyScanlineList
XmuDestroySegmentList
XmuDistinguishablePixels
XmuGetHostname
XmuInternAtom
XmuLocatePixmapFile
XmuNCopyISOLatin1Lowered
XmuNCopyISOLatin1Uppered
XmuNewArea
XmuNewCvtStringToWidget
XmuNewScanline
XmuOptimizeScanline
XmuPrintDefaultErrorMessage
XmuRegisterExternalAgent
XmuReleaseStippledPixmap
XmuReshapeWidget
XmuScanlineOrSegment
XmuScanlineXor
_XA_CHARACTER_POSITION
_XA_COMPOUND_TEXT
_XA_DELETE
_XA_LENGTH
_XA_LIST_LENGTH
_XA_NULL
_XA_SPAN
_XA_TARGETS
_XA_TEXT
_XA_UTF8_STRING
_XEditResCheckMessages

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec146620c6429a0a5c5110e0dcba4ea8

Headers

DLL Characteristics

File Characteristics

Imports

libx11

libxext

kernel32

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 159KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 160KB - Virtual size: 159KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 12KB - Virtual size: 11KB