0219ebe5c1d345050f3b9b17b515cf007ac3da9c462ed6c2c112614a878c90ee_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0219ebe5c1d345050f3b9b17b515cf007ac3da9c462ed6c2c112614a878c90ee_NeikiAnalytics.exe
Size

85KB
MD5

15310e9c91b760e5fbe8da1efed456e0
SHA1

95a40f46b1413f755665c75cfc3f50619f2ff7cb
SHA256

0219ebe5c1d345050f3b9b17b515cf007ac3da9c462ed6c2c112614a878c90ee
SHA512

6c0dce4ef46e65c23d7da25b9943cb51b5b9998ee832d7f54f4357df09a7aad24b48c3ddbccbe599b4c8d05515ff1b92122785f8ea1006f5df5e43025ed61854
SSDEEP

1536:fdsN4sNwi2Sl60vllxiUqQhbmlpql3VgIeW5TDjht/f6:fPi2dQPzhbmlYl3ubATDj36

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0219ebe5c1d345050f3b9b17b515cf007ac3da9c462ed6c2c112614a878c90ee_NeikiAnalytics.exe

Files

0219ebe5c1d345050f3b9b17b515cf007ac3da9c462ed6c2c112614a878c90ee_NeikiAnalytics.exe
.exe windows:4 windows x64 arch:x64

6e9208beab055cdca8b7694fb513fec8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\Users\Admin\Documents\Visual Studio 2005\Projects\ook\x64\release\ook.pdb

Imports

kernel32

ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
WaitForMultipleObjects
CloseHandle
GetProcAddress
GetModuleHandleW
LoadLibraryW
CreateThread
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
GetLastError
GetModuleHandleA
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

gdi32

CombineRgn
CreateEllipticRgn
CreateRectRgn
DeleteObject

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e9208beab055cdca8b7694fb513fec8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 9KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 176B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 9KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 176B