012cf942421db41177946fff6a5869cb0438265aa693d31334c770003ab2f818_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

012cf942421db41177946fff6a5869cb0438265aa693d31334c770003ab2f818_NeikiAnalytics.exe
Size

10KB
MD5

7b73e26bd2a66a92fcad1a34e39128e0
SHA1

ac957ab269a395b8920616579dcf8290f76093f7
SHA256

012cf942421db41177946fff6a5869cb0438265aa693d31334c770003ab2f818
SHA512

9fd4f2614a8ac7519096bff06d9b4ea72ad9d05cf03d4393b67bbb79d50f9c365e27d822f3a5c3365bc762a624f0ca09cf7474d286c01d9532d4e516a17c0b2e
SSDEEP

192:VHkAfH6fGLag5WDKD3XLPVlD6wOjv66YLs:iLiAW77PVlejv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
012cf942421db41177946fff6a5869cb0438265aa693d31334c770003ab2f818_NeikiAnalytics.exe

Files

012cf942421db41177946fff6a5869cb0438265aa693d31334c770003ab2f818_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

439e64f9202bd1f5d438d9e7e997e467

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

soliddesigner.exe

?call_or_link@@YAXABQAVLAOBJ@@PAH@Z
?check@VS@@QAEXH@Z
?Cnil@@3PAVLAOBJ@@A
?small_fixnum_table@@3PAPAVLAOBJ@@A
?Ldivide@@YAXXZ
?number_minus@@YAPAVLAOBJ@@PAV1@0@Z
?number_times@@YAPAVLAOBJ@@PAV1@0@Z
?Ltan@@YAXXZ
?number_plus@@YAPAVLAOBJ@@PAV1@0@Z
?vs_top@@3PAPAVLAOBJ@@A
?vs@@3VVS@@A
?top@VS@@QAEAAPAPAVLAOBJ@@XZ
?vs_limit@@3PAPAVLAOBJ@@A
?vs_overflow@@YAXXZ
?set_VV_data@@YAXQAPAVLAOBJ@@HPAV1@PAXH@Z
?string_to_object@@YAPAVLAOBJ@@ABQAV1@@Z
?MFnew@@YAXABQAVLAOBJ@@P6AXXZ0@Z
?putprop@@YAPAVLAOBJ@@ABQAV1@00@Z
?vs_base@@3PAPAVLAOBJ@@A

msvcr100

_crt_debugger_hook
_except_handler4_common
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer

Exports

Exports

?zubehoer_initialize@@YAXPADHPAVLAOBJ@@@Z

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

439e64f9202bd1f5d438d9e7e997e467

Headers

DLL Characteristics

File Characteristics

Imports

soliddesigner.exe

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 952B

.rsrc Size: 1024B - Virtual size: 1004B

.reloc Size: 1024B - Virtual size: 750B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 952B

.rsrc
Size: 1024B - Virtual size: 1004B

.reloc
Size: 1024B - Virtual size: 750B