10b359663002cb74a30419e51f58e38523743a13b7e5b55cfefe48b7292e10db_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

10b359663002cb74a30419e51f58e38523743a13b7e5b55cfefe48b7292e10db_NeikiAnalytics.exe
Size

69KB
MD5

9254abe23b239eb1a4a20e3a7e2b65b0
SHA1

b36af9f0adb32ea04ebf689784ce1f87ad8ea9fe
SHA256

10b359663002cb74a30419e51f58e38523743a13b7e5b55cfefe48b7292e10db
SHA512

d355946d2845fa17ba5ca8cd423767a193063957fe9544c01869785acb5210b2c08f24732932a8645e6695b68a20655ae19deb28947afddd11607a62278935ca
SSDEEP

1536:jgX/OrZ9iOCtKBM7vOeI4N3bINOOWXrcZ6VTYa1cGCA5P:jgX/W1B+pI4N3bINLWAZ6ZYGcGt5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10b359663002cb74a30419e51f58e38523743a13b7e5b55cfefe48b7292e10db_NeikiAnalytics.exe

Files

10b359663002cb74a30419e51f58e38523743a13b7e5b55cfefe48b7292e10db_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

31cc28f824ba71870d48da364f49a242

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\php-snap-build\php72\vc15\x64\obj\Release\php_exif.pdb

Imports

php7

zend_vspprintf
php_file_le_pstream
_php_stream_getc
zend_fetch_resource2
zend_register_ini_entries
php_file_le_stream
zend_wrong_parameter_type_error@@32
php_image_type_to_mime_type
php_verror
_emalloc@@8
_php_stream_tell
zend_spprintf
add_assoc_stringl_ex
zend_unregister_ini_entries
ap_php_snprintf
add_assoc_double_ex
php_getimagetype
_safe_emalloc@@24
add_index_string
zend_multibyte_parse_encoding_list
zend_parse_parameters
zend_register_long_constant
module_registry
_php_stream_read
display_ini_entries
zend_multibyte_fetch_encoding
_estrndup@@16
php_stream_stdio_ops
add_assoc_long_ex
php_error_docref0
zend_parse_arg_bool_slow@@16
_php_stream_seek
_convert_to_string@@8
_estrdup@@8
_array_init
zend_wrong_parameters_count_error@@32
_php_stream_free
php_info_print_table_start
_php_stream_open_wrapper_ex
php_strlcpy
zend_hash_str_exists@@24
zend_multibyte_encoding_converter
php_info_print_table_end
_safe_erealloc@@32
_zval_dtor_func@@8
php_basename
add_assoc_zval_ex
php_sys_stat_ex
OnUpdateString
php_info_print_table_row
add_assoc_string_ex
zend_parse_arg_str_slow@@16
add_assoc_null_ex
add_index_double
_efree@@8
add_index_long

vcruntime140

memcpy
memmove
strstr
__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e

kernel32

GetCurrentProcess
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext

api-ms-win-crt-math-l1-1-0

exp
log

Exports

Exports

get_module

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31cc28f824ba71870d48da364f49a242

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

php7

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB