2eb530f0f7630a73e7a7e9d514ce628e4f86cbddcdf3858c236dda4be24dd393_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2eb530f0f7630a73e7a7e9d514ce628e4f86cbddcdf3858c236dda4be24dd393_NeikiAnalytics.exe
Size

84KB
MD5

fb20daabee8be44f159b9ece02feb600
SHA1

30ffac21e9ae9da430751aa6e3713ac446c0aac5
SHA256

2eb530f0f7630a73e7a7e9d514ce628e4f86cbddcdf3858c236dda4be24dd393
SHA512

63696d438a1067ad0c3e015461ab3f92183c8d078b30606149f1509937a4e7c231ce250d2f180ede3a3a44318aac3a2b1fcd73a41bd5b4455ab6fa3d77021dd4
SSDEEP

1536:44woD3BF9IRIe02fpVxLcf4vOtP28iiubllsMK222G9JYCYpsa4:tFkuFhiiubwMK222G9JYCYpsa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb530f0f7630a73e7a7e9d514ce628e4f86cbddcdf3858c236dda4be24dd393_NeikiAnalytics.exe

Files

2eb530f0f7630a73e7a7e9d514ce628e4f86cbddcdf3858c236dda4be24dd393_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

e1c667aec0e58c0005dfbff36ddebf93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\opencv\build\x86\vc14\bin\Debug\cpp-tutorial-pointPolygonTest_demo.pdb

Imports

opencv_world310d

?line@cv@@YAXABV_InputOutputArray@1@V?$Point_@H@1@1ABV?$Scalar_@N@1@HHH@Z
?pointPolygonTest@cv@@YANABV_InputArray@1@V?$Point_@M@1@_N@Z
?findContours@cv@@YAXABV_InputOutputArray@1@ABV_OutputArray@1@1HHV?$Point_@H@1@@Z
?imshow@cv@@YAXABVString@1@ABV_InputArray@1@@Z
?waitKey@cv@@YAHH@Z
?namedWindow@cv@@YAXABVString@1@H@Z
?fastFree@cv@@YAXPAX@Z
?minMaxLoc@cv@@YAXABV_InputArray@1@PAN1PAV?$Point_@H@1@20@Z
?deallocate@Mat@cv@@QAEXXZ
?create@Mat@cv@@QAEXHPBHH@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z
?copyTo@Mat@cv@@QBEXABV_OutputArray@2@@Z
?error@cv@@YAXHABVString@1@PBD1H@Z
?deallocate@String@cv@@AAEXXZ
?allocate@String@cv@@AAEPADI@Z

msvcp140d

??0_Lockit@std@@QAE@H@Z
?_Debug_message@std@@YAXPB_W0I@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ

vcruntime140d

__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__CxxFrameHandler3
_CxxThrowException
memset
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
__vcrt_LoadLibraryExW
memcpy
_except_handler4_common

ucrtbased

__p__commode
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_set_new_mode
_configthreadlocale
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_set_fmode
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
_CrtDbgReport
_free_dbg
malloc
_callnewh
_CrtDbgReportW
_invalid_parameter
exit

kernel32

RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
IsDebuggerPresent

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1c667aec0e58c0005dfbff36ddebf93

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opencv_world310d

msvcp140d

vcruntime140d

ucrtbased

kernel32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 383B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 383B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB