a525f28d0127a8f3d0d04e8ce2e1f5f0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

a525f28d0127a8f3d0d04e8ce2e1f5f0_NeikiAnalytics.exe
Size

229KB
MD5

a525f28d0127a8f3d0d04e8ce2e1f5f0
SHA1

3fa8dba7c2d1f707b8ebcb78e72e45bf36cf4b37
SHA256

6792508a26a5fed5236f51921036264a4fc3178b937b756d98259cd5df70efb3
SHA512

2f99771fadb3ee727e1bc0b9f0f0b33b1d5d6231068c835953184ccc6ecebf7e0acf344359a67ac3f0020560d4035e4a9227cb93f0a5727ef1dabdd122b36f4c
SSDEEP

3072:eChXzMLq2r9B7nKsFt+FilFhyNBFGqiBkdrRlQrVwANrEgCjI:eBq2r9B+sFttlFhD6dr/QrSANrEgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a525f28d0127a8f3d0d04e8ce2e1f5f0_NeikiAnalytics.exe

Files

a525f28d0127a8f3d0d04e8ce2e1f5f0_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x86 arch:x86

6f9cf69b85a800e616ab1bf9ced80b38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

combase

WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer

kernel32

DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
RaiseException
SizeofResource

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
wcscmp

Exports

Exports

CreateEndpointPairFromSockAddrs
CreateHostNameFromSockAddr
CreateHostNameFromString
CreateNetworkAdapterFromGuid
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetAllHostNames
GetSortedEndpointPairs

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9cf69b85a800e616ab1bf9ced80b38

Headers

DLL Characteristics

File Characteristics

Imports

combase

kernel32

ntdll

ucrtbase

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 112B

.rodata Size: 4KB - Virtual size: 428B

.rdata Size: 8KB - Virtual size: 6KB

/4 Size: 4KB - Virtual size: 312B

.bss Size: - Virtual size: 164B

.edata Size: 4KB - Virtual size: 524B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 696B

.reloc Size: 4KB - Virtual size: 744B

/14 Size: 4KB - Virtual size: 288B

/29 Size: 88KB - Virtual size: 85KB

/41 Size: 8KB - Virtual size: 5KB

/55 Size: 12KB - Virtual size: 9KB

/67 Size: 4KB - Virtual size: 2KB

/80 Size: 4KB - Virtual size: 1KB

/91 Size: 16KB - Virtual size: 12KB

/102 Size: 4KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 112B

.rodata
Size: 4KB - Virtual size: 428B

.rdata
Size: 8KB - Virtual size: 6KB

/4
Size: 4KB - Virtual size: 312B

.bss
Size: - Virtual size: 164B

.edata
Size: 4KB - Virtual size: 524B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 696B

.reloc
Size: 4KB - Virtual size: 744B

/14
Size: 4KB - Virtual size: 288B

/29
Size: 88KB - Virtual size: 85KB

/41
Size: 8KB - Virtual size: 5KB

/55
Size: 12KB - Virtual size: 9KB

/67
Size: 4KB - Virtual size: 2KB

/80
Size: 4KB - Virtual size: 1KB

/91
Size: 16KB - Virtual size: 12KB

/102
Size: 4KB - Virtual size: 2KB