1ba0a57d900c362868bd4e1b727735ba4b6675d34dbb6b286e3a94f645e8efd2_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1ba0a57d900c362868bd4e1b727735ba4b6675d34dbb6b286e3a94f645e8efd2_NeikiAnalytics.exe
Size

103KB
MD5

fc5153d51a5d38041592e2d772fdabb0
SHA1

4cf95ab4cfe0ba9033b69a3495b5ce3307951fd4
SHA256

1ba0a57d900c362868bd4e1b727735ba4b6675d34dbb6b286e3a94f645e8efd2
SHA512

772e26779dd2c45a4ed89cd8b2f121c4b6958940c053e7b2bf6126abd3402679202f557277f5b06f4be27e002333fa470d91e8afe7f1133466537939ce339ed4
SSDEEP

1536:hFa4vETpZxat7HDQEJtyq3rvfKMy9x8fHjzkW9XsSVNUdExe:1ET90TsGoqzCMy9x83kW98i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba0a57d900c362868bd4e1b727735ba4b6675d34dbb6b286e3a94f645e8efd2_NeikiAnalytics.exe

Files

1ba0a57d900c362868bd4e1b727735ba4b6675d34dbb6b286e3a94f645e8efd2_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

c896d775927f519091693f3a8fe38def

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libzmq-mt-4_2_5

zmq_unbind
zmq_msg_close
zmq_msg_recv
zmq_disconnect
zmq_msg_size
zmq_socket_monitor
zmq_msg_send
zmq_msg_data
zmq_msg_init_size
zmq_msg_init
zmq_errno
zmq_connect
zmq_close
zmq_socket
zmq_setsockopt
zmq_getsockopt
zmq_bind

python35

PyBytes_AsStringAndSize
_Py_NoneStruct
PyLong_AsLongLong
PyTuple_New
PySequence_Contains
PyDict_SetItemString
PyDict_Size
PyLong_FromLongLong
PyExc_AttributeError
PyTuple_GetSlice
PyErr_SetString
PyErr_WriteUnraisable
PyErr_WarnFormat
PyEval_EvalCodeEx
PyExc_ValueError
_Py_CheckRecursiveCall
PyLong_FromUnsignedLong
PyDict_Next
PyErr_Format
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyErr_Restore
PyExc_OverflowError
PyTuple_GetItem
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Free
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyObject_GC_Del
PyErr_Fetch
PyLong_AsLong
PyObject_ClearWeakRefs
PyObject_Not
PyUnicode_FromFormat
PyList_New
PyModule_Create2
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyObject_RichCompareBool
PyUnicode_Decode
PyCode_New
PyException_SetTraceback
PyCapsule_New
PyBytes_Size
PyDict_SetItem
PyDict_New
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyNumber_Index
PyList_Type
PyDict_GetItemString
PyObject_GetItem
PyErr_CheckSignals
PyObject_GC_Track
PyBytes_FromStringAndSize
PyImport_Import
PyExc_NotImplementedError
PyDict_DelItem
PyUnicode_Compare
PyExc_TypeError
PyMem_Realloc
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyByteArray_empty_string
PyMem_Malloc
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
_PyObject_GC_New
PyType_Modified
PyEval_EvalFrameEx
PyUnicode_FromString
PyLong_FromSize_t
_PyType_Lookup
PyUnicode_Format
PyBuffer_Release
PyObject_Call
PyByteArray_Type
PyEval_RestoreThread
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyObject_GetAttr
Py_GetVersion
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyMethod_New
PyExc_RuntimeError
PyEval_SaveThread
PyTraceBack_Here
PyObject_GenericGetAttr
PyLong_FromSsize_t
PyErr_Occurred
PyUnicode_AsUnicode
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyBytes_AsString
PyExc_DeprecationWarning
PyLong_AsSsize_t
PyFrame_New
PyFunction_Type
PyErr_PrintEx
PyErr_WarnEx
PyLong_AsUnsignedLong
PyErr_GivenExceptionMatches
PyErr_SetObject
PyExc_Exception
_Py_CheckRecursionLimit
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
PyBaseObject_Type
PyObject_GetBuffer

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

strchr
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_crt_atexit
_seh_filter_dll
_initterm_e
_initterm
_getpid
_cexit
_configure_narrow_argv

Exports

Exports

PyInit_socket

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c896d775927f519091693f3a8fe38def

Headers

DLL Characteristics

File Characteristics

Imports

libzmq-mt-4_2_5

python35

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 19KB - Virtual size: 20KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 19KB - Virtual size: 20KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 8KB - Virtual size: 7KB