4433de2f380ca9de8d1ff6f8f7cb2e66d1ab2b483a8d8631ea502f6b842b7d3e_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4433de2f380ca9de8d1ff6f8f7cb2e66d1ab2b483a8d8631ea502f6b842b7d3e_NeikiAnalytics.exe
Size

13KB
MD5

1a80f94a6c205ff4eec236a1d8187810
SHA1

943e57c02073e815aebfbd02e40f0cd904f4c5fe
SHA256

4433de2f380ca9de8d1ff6f8f7cb2e66d1ab2b483a8d8631ea502f6b842b7d3e
SHA512

23a344a2f210b6efed27cb17127d10a32203c445da039ed6091ef0ade66744fd1e79b4ae49ab9d1b100afb74fbfc8c913fc26e8303a5375a304e94874fead576
SSDEEP

192:Krsl8QZLWfExtpE/tazuycq4yq8O9IjZwa:DZLWqbE/tvi4Bl9IjZwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4433de2f380ca9de8d1ff6f8f7cb2e66d1ab2b483a8d8631ea502f6b842b7d3e_NeikiAnalytics.exe

Files

4433de2f380ca9de8d1ff6f8f7cb2e66d1ab2b483a8d8631ea502f6b842b7d3e_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

c2ef50d1f8f9a12aa6ad60689f8e919b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\GAM\GAM\src\cpython\PCbuild\amd64\_uuid.pdb

Imports

rpcrt4

UuidCreateSequential

python312

PyModuleDef_Init
PyErr_SetFromWindowsErr
PyEval_SaveThread
PyModule_AddIntConstant
_Py_BuildValue_SizeT
PyEval_RestoreThread

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memcpy
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

Exports

Exports

PyInit__uuid

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2ef50d1f8f9a12aa6ad60689f8e919b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

python312

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 480B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 480B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 64B