02c9be15aba7398983755d7d6897074620f68b589817a28bad47b593bb9f9304_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

02c9be15aba7398983755d7d6897074620f68b589817a28bad47b593bb9f9304_NeikiAnalytics.exe
Size

415KB
MD5

6799ef9038c4360674678f7da937c6a0
SHA1

91f0a84d6e6d71d55b8e63ca2872a9a97e391564
SHA256

02c9be15aba7398983755d7d6897074620f68b589817a28bad47b593bb9f9304
SHA512

8d33676320e5b9941212ac3d7e17dddc73874007c40d0321616361632b7e1f0167352845a5f2b6b7d0a720f080c9d20fbd1377a1f1a302c861656e6305d4dada
SSDEEP

6144:fGUkX9OfsOoNBeo5hQnyeESxYClaNmaXzIJ0RxOE2Kac3pfTIOiV5sX9X:fGVYfpWMymlEIwxOE2KacZbFesX9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02c9be15aba7398983755d7d6897074620f68b589817a28bad47b593bb9f9304_NeikiAnalytics.exe

Files

02c9be15aba7398983755d7d6897074620f68b589817a28bad47b593bb9f9304_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

aec7d9800f41461712d2c6d889e002d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetConsoleOutputCP
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_environ
_errno
_exit
_fileno
_fmode
_fullpath
_get_osfhandle
_hypot
_initterm
_iob
_isatty
_j0
_j1
_lock
_onexit
_setmode
_snwprintf
_stat
_strdup
_unlock
_wfopen
_y0
_y1
abort
acos
asin
atan
atoi
calloc
clearerr
cosh
exit
fclose
feof
ferror
fflush
fgets
fprintf
fputc
fread
free
frexp
fwprintf
gmtime
fwrite
getc
getenv
isalpha
localeconv
log10
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
mktime
perror
qsort
raise
rand
realloc
setlocale
signal
sinh
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
tan
tanh
time
vfprintf
wcscpy
wcslen
wcstombs

libwinpthread-1

pthread_getspecific
pthread_key_create
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_once
pthread_setspecific

shell32

CommandLineToArgvW

shlwapi

PathIsRelativeA

user32

MessageBoxW

libonig-3

OnigEncodingUTF8
OnigSyntaxPerl_NG
onig_error_code_to_str
onig_foreach_name
onig_free
onig_new
onig_region_free
onig_region_new
onig_search

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aec7d9800f41461712d2c6d889e002d6

Headers

File Characteristics

Imports

kernel32

msvcrt

libwinpthread-1

shell32

shlwapi

user32

libonig-3

Sections

.text Size: 312KB - Virtual size: 311KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 56KB - Virtual size: 55KB

/4 Size: 34KB - Virtual size: 33KB

.bss Size: - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 312KB - Virtual size: 311KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 56KB - Virtual size: 55KB

/4
Size: 34KB - Virtual size: 33KB

.bss
Size: - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1KB - Virtual size: 1KB