38679f3b251ececd358d301d00d03fc0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

38679f3b251ececd358d301d00d03fc0_NeikiAnalytics.exe
Size

17KB
MD5

38679f3b251ececd358d301d00d03fc0
SHA1

eafbaf184ec9255898d88f7caecb8c46cbab04a6
SHA256

fd1672109f1387556c53aa499fce08a5c3ec9d4bb1bc8c475df34c9a725e49b8
SHA512

f646c252fac4f47bd7c9547c63778befeb5698b58aabfce2c45cb1902d8fb89d313b7385e032f9e36818970e875c2029b6cc999261f7d0941492d36ff3051b15
SSDEEP

384:QvPsvfR+h3LKvFVnQd8ZiOqbhO1jHht9PITlBynRm:pI5OnZVqbyHZIPynRm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38679f3b251ececd358d301d00d03fc0_NeikiAnalytics.exe

Files

38679f3b251ececd358d301d00d03fc0_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

9e7e83e9379f8dd39b918c544ce328d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetModuleHandleA
CreateThread
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
VirtualAlloc
VirtualFree
VirtualQuery
ResumeThread
SuspendThread
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
CreateToolhelp32Snapshot
VirtualProtect
OpenThread
GetLastError
InterlockedExchange
FlushInstructionCache
Thread32Next
HeapCreate
Thread32First
InterlockedCompareExchange
HeapFree
GetCurrentProcess
HeapAlloc
GetThreadContext
HeapReAlloc
SetThreadContext

msvcp120

?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z

msvcr120

_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
__crtUnhandledException
__dllonexit
_calloc_crt
_unlock
_lock
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
__crtTerminateProcess
_except_handler4_common
?terminate@@YAXXZ
_onexit
__clean_type_info_names_internal
_CxxThrowException
__CxxFrameHandler3
memcpy

Exports

Exports

?InitGameExtension@@YAXXZ

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e7e83e9379f8dd39b918c544ce328d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp120

msvcr120

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 988B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 988B