05f3884a0f4cd274aa1c8d99ba56f270_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

05f3884a0f4cd274aa1c8d99ba56f270_NeikiAnalytics.exe
Size

581KB
MD5

05f3884a0f4cd274aa1c8d99ba56f270
SHA1

ad7a11191b317f4b7771921e3d4e631eee10484f
SHA256

6bebfadbc316365f00bb36bb92342a97d988dfdb9321ebb07e4f38cdbd4707bb
SHA512

a1d0a487048638a279bf31ab09fecec5dc3117aa2bbd218186d604a78e13741cf03012cf2d44f76fe6c1b58280cbc1b6c9e2138879bd0d161bdd095184108d88
SSDEEP

6144:fT3hrcfLvCk0kt2PFxLyrN1jwTG/SBSr/fXygiO7cfSxDrSiWXSM05STS9S/xNSC:f7hcLjn40jwRWORxuxrCLN6+sx9WD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05f3884a0f4cd274aa1c8d99ba56f270_NeikiAnalytics.exe

Files

05f3884a0f4cd274aa1c8d99ba56f270_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

b1c6212ab8273fac0e0edb470d35cc13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libpypy3-c

PyPySequence_Size
PyPyObject_Size
PyPyBytes_FromString
PyPyNumber_Remainder
PyPyNumber_MatrixMultiply
PyPyErr_WriteUnraisable
PyPyBytes_Size
PyPyExc_DeprecationWarning
PyPyNumber_Long
PyPyLong_FromString
PyPyErr_SetObject
PyPyErr_NormalizeException
PyPyErr_SetString
PyPyNumber_Index
PyPyMem_Realloc
PyPyTuple_Type
PyPyNumber_TrueDivide
PyPyCapsule_New
PyPyNumber_Multiply
PyPyImport_GetModuleDict
PyPyFloat_Type
PyPyList_GET_SIZE
PyPyDict_SetItem
PyPyBytes_AS_STRING
PyPyLong_FromLongLong
PyPyLong_Type
PyPySequence_Contains
PyPyErr_Fetch
PyPyObject_GetIter
PyPyFloat_AS_DOUBLE
PyPyBuffer_Release
PyPyExc_NotImplementedError
PyPyLong_FromLong
PyPyEval_SaveThread
PyPyUnicode_DecodeASCII
PyPyExc_AssertionError
PyPyFloat_FromDouble
PyPyFrame_New
PyPyObject_IsInstance
PyPyOS_snprintf
PyPyLong_AsLongLong
PyPyExc_TypeError
PyPyType_Modified
PyPySequence_List
PyPyErr_WarnFormat
PyPyBool_Type
_PyPy_EllipsisObject
PyPyErr_SetNone
PyPyObject_GetItem
PyPyUnicode_FromFormat
PyPyNumber_InPlaceAdd
PyPyObject_CallObject
PyPyObject_Format
PyPyErr_Occurred
PyPyTraceBack_Here
PyPyLong_AsUnsignedLongLong
PyPyThreadState_Get
PyPyType_Ready
PyPyObject_Not
PyPyExc_OverflowError
PyPyNumber_Negative
PyPyLong_FromSsize_t
PyPyFloat_AsDouble
PyPyDict_New
PyPyExc_SystemError
PyPyErr_Clear
PyPyExc_ZeroDivisionError
PyPyDict_GetItemString
PyPyExc_StopIteration
PyPyModule_GetDict
PyPyBytes_FromStringAndSize
PyPyObject_Malloc
PyPyCFunction_NewEx
PyPyThread_free_lock
PyPyList_SET_ITEM
PyPyCapsule_Type
PyPyCapsule_IsValid
PyPyErr_GivenExceptionMatches
PyPyExc_UnboundLocalError
PyPyUnicode_Decode
PyPyMem_Free
PyPy_GetVersion
PyPyObject_IsSubclass
PyPyDict_Next
PyPyDict_Size
PyPyLong_FromSize_t
PyPyExc_ImportError
PyPyNumber_Absolute
PyPyImport_ImportModule
PyPyImport_AddModule
PyPyTuple_New
PyPyObject_Call
PyPyCode_NewEmpty
PyPyExc_BufferError
PyPyNumber_FloorDivide
PyPyList_Append
PyPyObject_GetBuffer
PyPyNumber_Or
PyPySequence_ITEM
PyPyErr_NoMemory
PyPyLong_FromUnsignedLongLong
_PyPy_FalseStruct
PyPyNumber_Add
PyPyErr_Restore
PyPyExc_RuntimeError
PyPyModule_Create2
PyPyUnicode_FromStringAndSize
PyPyObject_RichCompareBool
PyPyExc_Exception
PyPyThread_allocate_lock
PyPyThread_release_lock
PyPyEval_RestoreThread
PyPyUnicode_Compare
PyPyException_SetTraceback
PyPyModule_GetName
PyPyExc_ValueError
PyPyNumber_InPlaceTrueDivide
PyPy_FatalError
PyPyUnicode_FromString
PyPyObject_SetItem
PyPyDict_DelItem
PyPyErr_SetExcInfo
PyPyList_AsTuple
PyPyErr_GetExcInfo
PyPyMem_Malloc
PyPyBytes_Type
PyPyObject_RichCompare
PyPyType_IsSubtype
PyPyCapsule_GetPointer
PyPyLong_AsLong
_PyPy_Dealloc
PyPyObject_IsTrue
PyPyUnicode_Format
PyPyDict_SetItemString
PyPyObject_GetAttr
PyPyList_New
PyPyObject_GenericGetAttr
PyPyBaseObject_Type
PyPyObject_DelItem
PyPyErr_PrintEx
PyPyErr_ExceptionMatches
PyPyException_SetCause
PyPyDict_GetItem
PyPySequence_Tuple
PyPyErr_WarnEx
PyPyExc_AttributeError
PyPyUnicode_Type
PyPyObject_GetAttrString
PyPyObject_SetAttrString
PyPyIndex_Check
PyPyNumber_InPlaceMultiply
_PyPy_NoneStruct
PyPySequence_Check
PyPy_OptimizeFlag
PyPyObject_Free
PyPyList_SetSlice
PyPyExc_NameError
PyPyLong_AsSsize_t
PyPyUnicode_InternFromString
PyPyUnicode_Join
PyPyObject_Hash
PyPyUnicode_AsUTF8
PyPySequence_GetItem
PyPyGILState_Ensure
PyPySlice_New
PyPySlice_Type
PyPyList_Type
PyPyExc_BaseException
PyPyThread_acquire_lock
PyPyGILState_Release
PyPyTuple_Pack
PyPyImport_ImportModuleLevelObject
_PyPy_TrueStruct
PyPyErr_Format
PyPyObject_SetAttr
PyPyNumber_Subtract
PyPySequence_SetItem
PyPyCapsule_GetName
PyPyCode_New

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memset
__C_specific_handler
__std_type_info_destroy_list
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

free
malloc

api-ms-win-crt-math-l1-1-0

log1pf
acos
ceil
cos
exp
log1p
expm1
fmod
log
logf
pow
powf
sqrt
sqrtf
floor
expf

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit__generator
random_beta
random_binomial
random_bounded_bool_fill
random_bounded_uint16_fill
random_bounded_uint32_fill
random_bounded_uint64
random_bounded_uint64_fill
random_bounded_uint8_fill
random_buffered_bounded_bool
random_buffered_bounded_uint16
random_buffered_bounded_uint32
random_buffered_bounded_uint8
random_chisquare
random_exponential
random_f
random_gamma
random_gamma_f
random_geometric
random_geometric_search
random_gumbel
random_hypergeometric
random_interval
random_laplace
random_logistic
random_lognormal
random_logseries
random_multinomial
random_multivariate_hypergeometric_count
random_multivariate_hypergeometric_marginals
random_negative_binomial
random_noncentral_chisquare
random_noncentral_f
random_normal
random_pareto
random_poisson
random_positive_int
random_positive_int32
random_positive_int64
random_power
random_rayleigh
random_standard_cauchy
random_standard_exponential
random_standard_exponential_f
random_standard_exponential_fill
random_standard_exponential_fill_f
random_standard_exponential_inv_fill
random_standard_exponential_inv_fill_f
random_standard_gamma
random_standard_gamma_f
random_standard_normal
random_standard_normal_f
random_standard_normal_fill
random_standard_normal_fill_f
random_standard_t
random_standard_uniform
random_standard_uniform_f
random_standard_uniform_fill
random_standard_uniform_fill_f
random_triangular
random_uint
random_uniform
random_vonmises
random_wald
random_weibull
random_zipf

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1c6212ab8273fac0e0edb470d35cc13

Headers

DLL Characteristics

File Characteristics

Imports

libpypy3-c

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 229KB - Virtual size: 228KB

.rdata Size: 188KB - Virtual size: 188KB

.data Size: 152KB - Virtual size: 158KB

.pdata Size: 6KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 188KB - Virtual size: 188KB

.data
Size: 152KB - Virtual size: 158KB

.pdata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 3KB - Virtual size: 2KB