b0974b21a87645a0e25f6dc1530a1c90_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b0974b21a87645a0e25f6dc1530a1c90_NeikiAnalytics.exe
Size

580KB
MD5

b0974b21a87645a0e25f6dc1530a1c90
SHA1

05c356c162d7c19330d572f5cdb369f042d42a80
SHA256

31c430fdd17ae846e8b1b8e4bf8c86f10c1f5d6a14624ac8fb9293cd0d61fb92
SHA512

0b1df10cabb63d9e58659c17745f4827e3250b20de6de88463c4053260b0512e574f1117ddb5f2003f2cc663e848bb6240c15dd70d4cf16945ccc1f0b0aea8b5
SSDEEP

6144:o+iKhp/8WFm8AXrkoqIwkRsC1ZOw8wc5z8w2y4n3fOOO/:o3Khp/8Ym8vkL6JzSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0974b21a87645a0e25f6dc1530a1c90_NeikiAnalytics.exe

Files

b0974b21a87645a0e25f6dc1530a1c90_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

360f718733c5ab1b2a6b159d5db25758

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

ippcore-6.0

ippMalloc
ippFree

Exports

Exports

ippchGetLibVersion
ippsCompareIgnoreCaseLatin_16u
ippsCompareIgnoreCaseLatin_8u
ippsCompareIgnoreCase_16u
ippsCompare_16u
ippsCompare_8u
ippsConcatC_16u_D2L
ippsConcatC_8u_D2L
ippsConcat_16u
ippsConcat_16u_D2L
ippsConcat_8u
ippsConcat_8u_D2L
ippsEqual_16u
ippsEqual_8u
ippsFindCAny_16u
ippsFindCAny_8u
ippsFindC_16u
ippsFindC_8u
ippsFindC_Z_16u
ippsFindC_Z_8u
ippsFindRevCAny_16u
ippsFindRevCAny_8u
ippsFindRevC_16u
ippsFindRevC_8u
ippsFindRev_16u
ippsFindRev_8u
ippsFind_16u
ippsFind_8u
ippsFind_Z_16u
ippsFind_Z_8u
ippsHashMSCS_16u32u
ippsHashMSCS_8u32u
ippsHashSJ2_16u32u
ippsHashSJ2_8u32u
ippsHash_16u32u
ippsHash_8u32u
ippsInsert_16u
ippsInsert_16u_I
ippsInsert_8u
ippsInsert_8u_I
ippsLowercaseLatin_16u
ippsLowercaseLatin_16u_I
ippsLowercaseLatin_8u
ippsLowercaseLatin_8u_I
ippsLowercase_16u
ippsLowercase_16u_I
ippsRegExpFind_8u
ippsRegExpFree
ippsRegExpGetSize
ippsRegExpInit
ippsRegExpInitAlloc
ippsRegExpSetMatchLimit
ippsRemove_16u
ippsRemove_16u_I
ippsRemove_8u
ippsRemove_8u_I
ippsReplaceC_16u
ippsReplaceC_8u
ippsSplitC_16u_D2L
ippsSplitC_8u_D2L
ippsTrimCAny_16u
ippsTrimCAny_8u
ippsTrimC_16u
ippsTrimC_16u_I
ippsTrimC_8u
ippsTrimC_8u_I
ippsTrimEndCAny_16u
ippsTrimEndCAny_8u
ippsTrimStartCAny_16u
ippsTrimStartCAny_8u
ippsUppercaseLatin_16u
ippsUppercaseLatin_16u_I
ippsUppercaseLatin_8u
ippsUppercaseLatin_8u_I
ippsUppercase_16u
ippsUppercase_16u_I

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

360f718733c5ab1b2a6b159d5db25758

Headers

File Characteristics

Imports

kernel32

ippcore-6.0

Exports

Exports

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 352KB - Virtual size: 350KB

.data Size: 60KB - Virtual size: 61KB

.data1 Size: 4KB - Virtual size: 352B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 352KB - Virtual size: 350KB

.data
Size: 60KB - Virtual size: 61KB

.data1
Size: 4KB - Virtual size: 352B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB