3f52abf6e85e677742878296e4b3949a351ed14fe25769b400c1faa734556378_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

3f52abf6e85e677742878296e4b3949a351ed14fe25769b400c1faa734556378_NeikiAnalytics.exe
Size

7.6MB
MD5

a7975d2af2ead6cae68ac87426791570
SHA1

1957362eb45ad8a6cd8a0290990a077e2e6779fe
SHA256

3f52abf6e85e677742878296e4b3949a351ed14fe25769b400c1faa734556378
SHA512

6a07626a90b27a638cf25e9108a5fd6ee1d75b688d5595675a880cd0eba7e93cdb20640eca6fc39d2fde79a45471c77c89cf647f677c8917499274cc4e3d4d20
SSDEEP

196608:Htb5qs0dnO4cgEZZpmvvW7UCItxTlfbJZJL//:N9qY3KvWYCIt/fFXb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f52abf6e85e677742878296e4b3949a351ed14fe25769b400c1faa734556378_NeikiAnalytics.exe

Files

3f52abf6e85e677742878296e4b3949a351ed14fe25769b400c1faa734556378_NeikiAnalytics.exe
.exe windows:5 windows x64 arch:x64

10ac55d36f29a3ac977c10f449ba9e96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

love

love_codename
luaopen_love
love_version

lua51

lua_tonumber
lua_type
lua_tolstring
lua_settop
lua_close
lua_pushstring
lua_pushcclosure
lua_pushboolean
lua_getfield
lua_createtable
lua_setfield
lua_rawseti
lua_call
luaL_openlibs
luaL_newstate
lua_isnumber

msvcr120

_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
_initterm
printf
strcmp
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
EncodePointer
GetCommandLineW

sdl2

SDL_ShowSimpleMessageBox
SDL_SetMainReady
SDL_iconv_string
SDL_wcslen
SDL_isspace
SDL_free
SDL_malloc

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10ac55d36f29a3ac977c10f449ba9e96

Headers

DLL Characteristics

File Characteristics

Imports

love

lua51

msvcr120

kernel32

sdl2

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 184B

.pdata Size: 512B - Virtual size: 300B

.rsrc Size: 403KB - Virtual size: 403KB

.reloc Size: 512B - Virtual size: 36B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 184B

.pdata
Size: 512B - Virtual size: 300B

.rsrc
Size: 403KB - Virtual size: 403KB

.reloc
Size: 512B - Virtual size: 36B