09ee87ed6ff38440b846d1b68badc330ead482716ea5cd4674ce0e1b7cf7fe8c_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

09ee87ed6ff38440b846d1b68badc330ead482716ea5cd4674ce0e1b7cf7fe8c_NeikiAnalytics.exe
Size

83KB
MD5

95ded3df58e71bcee1246e99ae10b080
SHA1

52ad23c5499e266b6075e54d520fde3f8c646498
SHA256

09ee87ed6ff38440b846d1b68badc330ead482716ea5cd4674ce0e1b7cf7fe8c
SHA512

fe95c3b1b142571bafb9aa2e154063a4611e890af638a9b3983a37a8257ce0eb9ade74c3b19c6ac5ad76b592d397517355b023601cf372f8c166760545347f41
SSDEEP

1536:3KBmUybyie9o/6W2qLQQE7r6N/vqsznd6l1NDIqg:OT3C/6sS71EYND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09ee87ed6ff38440b846d1b68badc330ead482716ea5cd4674ce0e1b7cf7fe8c_NeikiAnalytics.exe

Files

09ee87ed6ff38440b846d1b68badc330ead482716ea5cd4674ce0e1b7cf7fe8c_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

f2df8bb9e6fa2c7fa2543ac8e1bec1d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python310

PyModule_AddObject
_PyArg_ParseTuple_SizeT
PyErr_SetString
PyErr_NewException
PyGILState_Ensure
PyEval_RestoreThread
PyGILState_Release
_Py_BuildValue_SizeT
PyExc_ValueError
PyModule_Create2
PyEval_SaveThread
PyErr_Occurred

kernel32

RtlVirtualUnwind
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-heap-l1-1-0

malloc
free
calloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

log

Exports

Exports

PyInit__compression

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2df8bb9e6fa2c7fa2543ac8e1bec1d5

Headers

DLL Characteristics

File Characteristics

Imports

python310

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 120B

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 120B