ae52ca56231e052de87b3c5c20bb6cc0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ae52ca56231e052de87b3c5c20bb6cc0_NeikiAnalytics.exe
Size

1.0MB
MD5

ae52ca56231e052de87b3c5c20bb6cc0
SHA1

63ea7dd84bde5a28b6e6d0d63ef5126850d70e37
SHA256

b928ecbe43aeb6825d92c5de38195d76a9f752e677d7ce928a1bb3eeb8246276
SHA512

21d3af528965180aea756faf705772bc071c1f1b37b961a7041f4817a9e5ab84abe97f19af40ed1475901b54f51a8765c97e5dbc03ab523b919d7917c3bd82ae
SSDEEP

6144:Wi05kH9OyU2uv5SRf/FWgFgtHgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukTb:JrHGPv5SmptADmUWuVZkxikdXcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae52ca56231e052de87b3c5c20bb6cc0_NeikiAnalytics.exe

Files

ae52ca56231e052de87b3c5c20bb6cc0_NeikiAnalytics.exe
.dll windows:4 windows x64 arch:x64

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xbpbxnxouib8mt

Imports

mprapi

MprAdminInterfaceTransportAdd

user32

GetDoubleClickTime

kernel32

GetBinaryTypeW
SetLastError
GetCurrentThreadId
MulDiv
ExitProcess
EnumResourceTypesA
GetModuleHandleA
GetModuleFileNameW
CreateDirectoryA
GetLastError

crypt32

CryptFreeOIDFunctionAddress

winmm

midiInReset

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sbss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xlhmxa
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hxtf
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vnqtju
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nlbpks
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xqsn
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jnbj
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oxia
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nbegtk
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ioiw
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mprapi

user32

kernel32

crypt32

winmm

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.code Size: 12KB - Virtual size: 8KB

.sbss Size: 4KB - Virtual size: 1KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 80KB - Virtual size: 76KB

.pdata Size: 4KB - Virtual size: 360B

.crt Size: 160KB - Virtual size: 158KB

DATA Size: 44KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 996B

.xlhmxa Size: 8KB - Virtual size: 4KB

.hxtf Size: 4KB - Virtual size: 2KB

.vnqtju Size: 4KB - Virtual size: 2KB

.nlbpks Size: 280KB - Virtual size: 276KB

.xqsn Size: 4KB - Virtual size: 1KB

.jnbj Size: 4KB - Virtual size: 2KB

.oxia Size: 28KB - Virtual size: 27KB

.nbegtk Size: 280KB - Virtual size: 276KB

.ioiw Size: 4KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 1KB

.code
Size: 12KB - Virtual size: 8KB

.sbss
Size: 4KB - Virtual size: 1KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 80KB - Virtual size: 76KB

.pdata
Size: 4KB - Virtual size: 360B

.crt
Size: 160KB - Virtual size: 158KB

DATA
Size: 44KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 996B

.xlhmxa
Size: 8KB - Virtual size: 4KB

.hxtf
Size: 4KB - Virtual size: 2KB

.vnqtju
Size: 4KB - Virtual size: 2KB

.nlbpks
Size: 280KB - Virtual size: 276KB

.xqsn
Size: 4KB - Virtual size: 1KB

.jnbj
Size: 4KB - Virtual size: 2KB

.oxia
Size: 28KB - Virtual size: 27KB

.nbegtk
Size: 280KB - Virtual size: 276KB

.ioiw
Size: 4KB - Virtual size: 1KB