149ca54d2a91e4a2be2da12fe362b6679a267b4b359cf3dcbe8eb062ed1bd289_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

149ca54d2a91e4a2be2da12fe362b6679a267b4b359cf3dcbe8eb062ed1bd289_NeikiAnalytics.exe
Size

50KB
MD5

7e2d240ed4cf1452cc6fb01a8a65d750
SHA1

cb3346e9859911a9a48b0810cc1d2b152d9fd40e
SHA256

149ca54d2a91e4a2be2da12fe362b6679a267b4b359cf3dcbe8eb062ed1bd289
SHA512

9baa5e9183a3f2141cf1f5d7aa13b97eb101033062bc0fc8778d5455f424449d011cb738cf6bb027f525017e437a9102a2bc6605c1d48bf9cd58d2fee3c5bb14
SSDEEP

768:Wjec7bzecDcgKDwKz0yr3j3QKMVTurVIa9+FX6JepclkDzGLiw2cP:/WOOJKDww08zQZVTur6nKWwZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149ca54d2a91e4a2be2da12fe362b6679a267b4b359cf3dcbe8eb062ed1bd289_NeikiAnalytics.exe

Files

149ca54d2a91e4a2be2da12fe362b6679a267b4b359cf3dcbe8eb062ed1bd289_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

024407734d914922d0a8e3e53bfbafd3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

N:\php-sdk\php81dev\x64\Release_TS\php_ast.pdb

Imports

php8ts

zend_parse_arg_long_slow@@24
zend_wrong_parameter_error@@40
php_error_docref
add_next_index_string
add_next_index_long
_emalloc@@8
spl_ce_RuntimeException
spl_ce_LogicException
zend_empty_string
zend_string_init_interned
zend_new_interned_string
_php_stream_free
smart_str_erealloc@@16
zend_throw_exception_ex
php_info_print_table_end
php_info_print_table_start
php_info_print_table_row
zend_register_long_constant
_php_stream_open_wrapper_ex
_php_stream_copy_to_mem
zend_wrong_parameters_count_error@@16
object_init_ex
zend_declare_property_ex
zend_register_internal_class
zend_parse_parameters
zend_compile_string_to_ast
zend_binary_strcasecmp@@32
zend_restore_error_handling
zend_replace_error_handling
zval_ptr_dtor
zend_ast_destroy@@8
_zend_new_array@@8
zend_hash_next_index_insert@@16
zend_hash_index_update@@24
zend_hash_add_new@@24
__zend_malloc
_efree@@8
tsrm_get_ls_cache

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memset
memcpy

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_exit
_configure_narrow_argv

kernel32

QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

Exports

Exports

get_module
jump_fcontext
make_fcontext

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

024407734d914922d0a8e3e53bfbafd3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

php8ts

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 1024B - Virtual size: 1008B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 480B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 1024B - Virtual size: 1008B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 480B