461cb7347871cc2945f40141aa119d614478787d9afeae7696b961493cf83ae1_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

461cb7347871cc2945f40141aa119d614478787d9afeae7696b961493cf83ae1_NeikiAnalytics.exe
Size

40KB
MD5

631e878ab7790ababd85c1f1da61ced0
SHA1

4566ac33ea640543e0bcf49d63a8cef478c68fa0
SHA256

461cb7347871cc2945f40141aa119d614478787d9afeae7696b961493cf83ae1
SHA512

39a8bc7353b99cf5121fc46f4781807e3e748c97f1497a78e0d69e5626aa49601dc32b142277acb674c05710dc3384ce2f17c5c3ba85d07cc84dc87e1f37199c
SSDEEP

384:1FhlEuyKBveuDihgjTniLNN7EH+s4/uNoYsYpEpWQ6WN3JTc+6IpW/:LFfF1XiLkevYpLQpl96p/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
461cb7347871cc2945f40141aa119d614478787d9afeae7696b961493cf83ae1_NeikiAnalytics.exe

Files

461cb7347871cc2945f40141aa119d614478787d9afeae7696b961493cf83ae1_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

0e611b4149383e20d090f776cb0d8154

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Bhat\Recorder\HostRec\Debug\HostRec.pdb

Imports

ws2_32

WSAGetLastError
WSACleanup
WSAStartup
socket
recvfrom
ntohs
inet_ntoa
inet_addr
htons
closesocket
bind
htonl
send

msvcr110d

_CrtSetCheckCount
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_CrtDbgReportW
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_dbg
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
wcscpy_s
_wmakepath_s
_wsplitpath_s
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
_CRT_RTC_INITW
clock
puts
printf
exit
memset
_wcmdln

kernel32

GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DecodePointer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
lstrlenA
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
QueryPerformanceCounter

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e611b4149383e20d090f776cb0d8154

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

msvcr110d

kernel32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 1KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 1KB - Virtual size: 1KB