4b3ef5e9cf6287dbc7397a1a61574d0d8fc629882b522e7286f746bc438ed69e_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4b3ef5e9cf6287dbc7397a1a61574d0d8fc629882b522e7286f746bc438ed69e_NeikiAnalytics.exe
Size

1.8MB
MD5

ef5eef241d9975c370be41f909469be0
SHA1

add657dafd02641979aded407107dcdd784fc3de
SHA256

4b3ef5e9cf6287dbc7397a1a61574d0d8fc629882b522e7286f746bc438ed69e
SHA512

7b0960ec57de194021c00bebc950c1d60262fc9a48f2647bbef2299dfbd3aa6051c4988208ea079a7b5043bf5ec7d2e08c2a6ec8d5f745c4ea4900f3ab7490f5
SSDEEP

24576:ITc1RYjuycGmT+IBcmhsYqSuJZQ6RrBvdRKCpqMrfUgYbkhqfj8uqw:ITc1RYwGmT+2cmhs4+rZNrfPOkhqvq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b3ef5e9cf6287dbc7397a1a61574d0d8fc629882b522e7286f746bc438ed69e_NeikiAnalytics.exe

Files

4b3ef5e9cf6287dbc7397a1a61574d0d8fc629882b522e7286f746bc438ed69e_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

cd1c5d5ba01fc73a7209ffe3df811cbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\_work\1\s\\binaries\x86ret\bin\i386\mspdbcmf.pdb

Imports

kernel32

EncodePointer
GetEnvironmentVariableW
GetTempPathW
FindClose
Sleep
GetLastError
HeapAlloc
DecodePointer
GetProcAddress
GetUserDefaultUILanguage
GetProcessHeap
GetModuleHandleW
VirtualQuery
LoadLibraryExW
GetNativeSystemInfo
GetModuleFileNameW
FindNextFileW
HeapFree
FindFirstFileW
LoadResource
MoveFileExW
FindResourceExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
ExitProcess
GetModuleHandleExW
DeleteFileW
GetCommandLineA
GetCommandLineW
GetStdHandle
WriteFile
GetFileType
CompareStringW
LCMapStringW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
HeapSize
HeapReAlloc
CloseHandle
CreateFileW
WriteConsoleW
GetFileAttributesW
GetFileSize
SetFileAttributesW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
SetEndOfFile
DeviceIoControl
MapViewOfFileEx
CreateFileMappingA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
ExpandEnvironmentStringsW
GetFullPathNameW
GetSystemInfo
LocalAlloc
LocalFree
InitializeCriticalSection
GetDriveTypeW
GetCurrentDirectoryW
InitializeCriticalSectionEx
TryEnterCriticalSection
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork

ole32

CoCreateGuid
StringFromGUID2

rpcrt4

UuidCreate

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 616KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd1c5d5ba01fc73a7209ffe3df811cbe

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

rpcrt4

advapi32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 10KB - Virtual size: 24KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 616KB - Virtual size: 620KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 10KB - Virtual size: 24KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 616KB - Virtual size: 620KB