6a0c8eddbe0b121dd23424a306c502e4f7851f3b0eccbffee95dcea7d443215f_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6a0c8eddbe0b121dd23424a306c502e4f7851f3b0eccbffee95dcea7d443215f_NeikiAnalytics.exe
Size

14KB
MD5

877ce26b4dcccf38d482c6d58b55dc80
SHA1

b1fe4ab3b0da25041acd7f12ce667afdc00776ea
SHA256

6a0c8eddbe0b121dd23424a306c502e4f7851f3b0eccbffee95dcea7d443215f
SHA512

4c5b860ced362ae019a073f97f222f3837fab94deae4d1ec608992b7d633167d137bf908afa2489d8a86526ad9486df32c00918b494661612ccac3b66728d1cd
SSDEEP

192:w/VFMoL8v6dFDyekOif8w02r1S+xm37cDnz2nbhIg:w/VpL8EmekOSJ0o3SntIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0c8eddbe0b121dd23424a306c502e4f7851f3b0eccbffee95dcea7d443215f_NeikiAnalytics.exe

Files

6a0c8eddbe0b121dd23424a306c502e4f7851f3b0eccbffee95dcea7d443215f_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

2068891d5df3a121ba08cc3277af3a92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Localization\Resource Source Code\Scanner\Button Utility\DocAction_VC2015\FileOutput\v2.0.1.9_16L\Release\Russian.pdb

Imports

mfc140u

ord2374
ord1511
ord485
ord2246
ord2268
ord1703
ord1513

kernel32

QueryPerformanceCounter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
CloseHandle
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent

ws2_32

WSAStartup

vcruntime140

__vcrt_InitializeCriticalSectionEx
memset
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_cexit
_initterm
_initterm_e

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2068891d5df3a121ba08cc3277af3a92

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

ws2_32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 28B

.giats Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 412B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 28B

.giats
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 412B