5ae23e94358d66843e6ea62145819665de70eef556a5de6ee7f7d9d461d239fd_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5ae23e94358d66843e6ea62145819665de70eef556a5de6ee7f7d9d461d239fd_NeikiAnalytics.exe
Size

609KB
MD5

a73f1bc141f7d31e33cb2c1b50d042f0
SHA1

03d94d6acd2364fb8a6682a7388b675d337382c1
SHA256

5ae23e94358d66843e6ea62145819665de70eef556a5de6ee7f7d9d461d239fd
SHA512

ca36c6023999ebae0ee56c2847bad7318f668d92851469ec86f5389f98db42ec79070588d33efbf28316c661cedc3e4a986d41f3871605a96540c2fbab3640b2
SSDEEP

12288:BFJT75TrlvL6SejYNOkBR+iCwPkOcx6m:BD75n+iCwPJcc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ae23e94358d66843e6ea62145819665de70eef556a5de6ee7f7d9d461d239fd_NeikiAnalytics.exe

Files

5ae23e94358d66843e6ea62145819665de70eef556a5de6ee7f7d9d461d239fd_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

bd5289ca6dc741532d37453138de2b57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python310

PyErr_Clear
PyList_Append
PyBytes_Type
PyLong_AsSize_t
PyMapping_Keys
PyDict_SetItem
PyDict_New
PyUnicode_FromObject
PyUnicode_Type
PyThread_free_lock
PyMem_Free
PyTuple_SetItem
PyErr_NoMemory
PyDict_GetItem
PyList_Reverse
PyObject_GetItem
PyObject_CallObject
PyErr_CheckSignals
PyUnicode_FromKindAndData
_Py_Dealloc
_PyObject_New
PyExc_TypeError
PyMem_Realloc
PyMapping_Values
PyDict_Copy
PyTuple_Pack
_PyUnicode_Ready
PyCallable_Check
PyMem_Malloc
PyExc_IndexError
_Py_TrueStruct
PyList_SetItem
PyUnicode_FromString
PyLong_FromSize_t
PyBuffer_Release
PyObject_Call
_PyObject_CallMethod_SizeT
PyUnicode_Substring
PyEval_RestoreThread
PyUnicode_Join
_Py_FalseStruct
PyTuple_Type
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyDict_Next
PyExc_ValueError
_PyBytes_Join
PyErr_SetString
PyUnicode_New
PyExc_TimeoutError
PyThread_acquire_lock
PyDict_Size
PyDict_SetItemString
PyLong_FromString
PyTuple_New
_Py_NoneStruct
PyBytes_FromString
PyFloat_AsDouble
PyDict_Contains
PyThread_allocate_lock
PySlice_Unpack
PyObject_GetAttrString
_PyUnicode_ToLowercase
PyType_Ready
PyModule_Create2
PyList_New
PyObject_GetBuffer
PyObject_ClearWeakRefs
PyLong_FromUnicodeObject
PyLong_AsLong
_PyArg_ParseTuple_SizeT
PyThread_release_lock
PyObject_Free
PySequence_GetSlice
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyLong_FromSsize_t
PyBytes_FromObject
PyErr_Occurred
PyBytes_AsString
PyImport_ImportModule
PySlice_Type
PyLong_AsUnsignedLong
_Py_BuildValue_SizeT
PySlice_AdjustIndices
PyObject_Repr
PyModule_GetDict
PyBytes_FromStringAndSize
Py_GenericAlias

kernel32

DisableThreadLibraryCalls
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
memset
memmove
_except_handler4_common
memcpy

api-ms-win-crt-string-l1-1-0

isalpha
islower
isdigit
ispunct
isspace
iscntrl
isalnum
isprint
tolower
isupper
isgraph
toupper

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit

Exports

Exports

PyInit__regex

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd5289ca6dc741532d37453138de2b57

Headers

DLL Characteristics

File Characteristics

Imports

python310

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 407KB - Virtual size: 407KB

.data Size: 38KB - Virtual size: 39KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 407KB - Virtual size: 407KB

.data
Size: 38KB - Virtual size: 39KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 9KB - Virtual size: 9KB