b538633b1642e0271fdcfce622176970_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b538633b1642e0271fdcfce622176970_NeikiAnalytics.exe
Size

52KB
MD5

b538633b1642e0271fdcfce622176970
SHA1

ae5095752ba3f5e607282ffa5bb6f260fc42e184
SHA256

2e42fc954896c357472d5c9e17d509c264f669cd65435bece03e4ba700f2b68d
SHA512

605f83cc6248e7669370a94af74ab84907eab751321280cc65bae5d2cac7b073df4eef4aa36037aa674a90cd8a79bc08a6a03a23831b674b2aa251a567412fb0
SSDEEP

768:deeiCSfecHE7ESQC0p6qd5Nh2tkXhTqkrPQZlfLT1/4g+EkrjF8ba:dpiCSfNsVQBpRd5NhtR/Pw45BrZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b538633b1642e0271fdcfce622176970_NeikiAnalytics.exe

Files

b538633b1642e0271fdcfce622176970_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

1134f44969da6c885026043ad8789cb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\builds\moz2_slave\m-in-w32-000000000000000000000\build\src\obj-firefox\media\libcubeb\tests\test_latency.pdb

Imports

nss3

PR_GetEnv

xul

NS_CStringToUTF16
NS_GetServiceManager
NS_CStringContainerFinish
NS_CStringContainerInit2
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_NewLocalFile
NS_ShutdownXPCOM
NS_InitXPCOM2

mozglue

realloc
_strdup
free
moz_xmalloc
calloc
_aligned_malloc
malloc
_aligned_free

kernel32

GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
FreeLibrary
WaitForMultipleObjects
ResetEvent
VerifyVersionInfoA
SetThreadPriority
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
VerSetConditionMask
MultiByteToWideChar
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
LoadLibraryA
IsDebuggerPresent

user32

GetSystemMetrics

winmm

waveInGetNumDevs
waveInMessage
waveOutMessage
waveOutGetPosition
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutGetNumDevs
waveInGetDevCapsA
waveOutGetDevCapsA

ole32

CoInitializeEx
CoTaskMemFree
PropVariantClear
CoCreateInstance
CoUninitialize

vcruntime140

_except_handler4_common
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
memcpy
memmove
_purecall
memset

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
_beginthreadex
abort
_wassert
exit
terminate
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_exit
_set_app_type
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm_e
_initterm

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode
__acrt_iob_func
putchar
__stdio_common_vfprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
_except1
ceil
round
floor
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1134f44969da6c885026043ad8789cb9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

nss3

xul

mozglue

kernel32

user32

winmm

ole32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 956B

.gfids Size: 512B - Virtual size: 32B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 956B

.gfids
Size: 512B - Virtual size: 32B

.reloc
Size: 2KB - Virtual size: 1KB