4c3f8effb51771e5e10c16f29d3601f8d3dff12316f0589242363b20533b4aa1_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4c3f8effb51771e5e10c16f29d3601f8d3dff12316f0589242363b20533b4aa1_NeikiAnalytics.exe
Size

660KB
MD5

16f0231729099000fe3993b1ac32d790
SHA1

2a23275177cb879f47ba68503791ea2c5e77bc02
SHA256

4c3f8effb51771e5e10c16f29d3601f8d3dff12316f0589242363b20533b4aa1
SHA512

6034356b8c1d97e9a548d8ae47c284b9e8e45a3ae527172b671c8716f144116e62cf3f9b024f1e092e9a045cd0a057f3eaf61b2024b1b29d7aa33b648fff30ba
SSDEEP

12288:wjKkdmur+W89bpBXuq2d6jZevTdv0L6c5kdNR:wWkdmxW8dpBXZ1jZOvS5a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c3f8effb51771e5e10c16f29d3601f8d3dff12316f0589242363b20533b4aa1_NeikiAnalytics.exe

Files

4c3f8effb51771e5e10c16f29d3601f8d3dff12316f0589242363b20533b4aa1_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

3afff27ad666fd8604165766fbb72e6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
AreFileApisANSI
MultiByteToWideChar
CloseHandle
DuplicateHandle
GetCurrentProcess
CreateProcessA
GetLocalTime
GetFullPathNameW
GetFullPathNameA
GetTempPathA
DeleteCriticalSection
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
GetCurrentThreadId
IsDebuggerPresent
MoveFileExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
WaitForSingleObject
GetExitCodeProcess
CreatePipe
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
RtlUnwind
ReadFile
GetConsoleMode
ReadConsoleW
RaiseException
GetDriveTypeW
GetCurrentProcessId
GetFileAttributesExW
SetStdHandle
GetConsoleCP
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
FindClose
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
CreateFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
HeapSize
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
SetEnvironmentVariableA
SetEndOfFile
SetEnvironmentVariableW
DeleteFileW

Sections

.text
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3afff27ad666fd8604165766fbb72e6f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 517KB - Virtual size: 516KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 53KB - Virtual size: 199KB

.reloc Size: 45KB - Virtual size: 45KB

.text
Size: 517KB - Virtual size: 516KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 53KB - Virtual size: 199KB

.reloc
Size: 45KB - Virtual size: 45KB