47cdfd26b041202453a5f1fb6ee398a0aa7f5df9f2f126890ef71169349a1935_NeikiAnalytics[.]exe

General

Target

47cdfd26b041202453a5f1fb6ee398a0aa7f5df9f2f126890ef71169349a1935_NeikiAnalytics.exe
Size

19KB
MD5

a6b1b607ebf26cd9886b19017aa70c90
SHA1

34c1ce8e99412b59efdf7fe9f8249c4593938cb2
SHA256

47cdfd26b041202453a5f1fb6ee398a0aa7f5df9f2f126890ef71169349a1935
SHA512

2630d14f4222115b52705bf3e930c536fe00804a71c8572566f64e76568f20e58f9c0aa919a79e628b0b74c13d068f3d502f9e8bc1a31a420a900fc373672c11
SSDEEP

384:yazZOc96r09fWMqwKFYZuAWQmzteronomuuF9EctqU+cBuKRU:ykOHrcjqpiZuAWQmzter4oZuDRLtuKRU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47cdfd26b041202453a5f1fb6ee398a0aa7f5df9f2f126890ef71169349a1935_NeikiAnalytics.exe

Files

47cdfd26b041202453a5f1fb6ee398a0aa7f5df9f2f126890ef71169349a1935_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

3254446366805aca26c0d6433fa60249

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\projects\BuildingBlock\ProcessBlock\Release\E1.pdb

Imports

kernel32

GetSystemTime
SystemTimeToFileTime
Sleep
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsDebuggerPresent

ws2_32

ntohs
getsockname
inet_addr
htons
socket
WSAStartup
sendto
WSAGetLastError
recvfrom

msvcr120

memcpy
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
printf
strcpy_s
strncmp
strncpy_s
fopen_s
fgets
fclose
strcat_s
strstr
isdigit
atoi
perror
_beginthreadex
isalnum
sprintf_s
??3@YAXPAX@Z
??2@YAPAXI@Z
isspace
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
_lock
_unlock
memset

Exports

Exports

CreateModule
DeleteModule
Process

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3254446366805aca26c0d6433fa60249

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

msvcr120

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 868B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 808B

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 868B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 808B