147131e9a59a979491da06f305fee95d2975cdd6895a86ba1c35bb84d52809bc_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

147131e9a59a979491da06f305fee95d2975cdd6895a86ba1c35bb84d52809bc_NeikiAnalytics.exe
Size

651KB
MD5

071e395cacb2f9589db43f21d3194f40
SHA1

3715b4f7c81db2d5edb0f4b2e0cef3feb5a7273c
SHA256

147131e9a59a979491da06f305fee95d2975cdd6895a86ba1c35bb84d52809bc
SHA512

aef83af492f119e3ede2a6996b84612d7dfab3fdc5256ab064001a1e39c7d857e5bd01d1a2d86200c71c62862359e0891174b5b0f656b89e4231e792bde4e608
SSDEEP

6144:twuOMT5ceRrWsBZTH/UKYyJufrg7J77GPk6T5DxN2w:tzT5cbsBZrUKZA0KJ5Dbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147131e9a59a979491da06f305fee95d2975cdd6895a86ba1c35bb84d52809bc_NeikiAnalytics.exe

Files

147131e9a59a979491da06f305fee95d2975cdd6895a86ba1c35bb84d52809bc_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

071d2e4b0e6f03f0124e5352259d773e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python39

PyBytes_Type
PyLong_AsSize_t
PyMapping_Keys
PyDict_SetItem
PyDict_New
PyUnicode_FromObject
PyUnicode_Type
PyThread_free_lock
PyMem_Free
PyTuple_SetItem
PyErr_NoMemory
PyDict_GetItem
PyList_Reverse
PyObject_GetItem
PyObject_CallObject
PyErr_CheckSignals
PyUnicode_FromKindAndData
PyBytes_FromStringAndSize
PySequence_GetSlice
PyExc_TypeError
PyMem_Realloc
PyMapping_Values
PyDict_Copy
PyTuple_Pack
_PyUnicode_Ready
PyCallable_Check
PyMem_Malloc
PyExc_IndexError
_Py_TrueStruct
PyList_SetItem
PyUnicode_FromString
PyLong_FromSize_t
PyBuffer_Release
PyObject_Call
PyObject_Repr
PyList_Append
PyEval_RestoreThread
PyModule_GetDict
_Py_Dealloc
PyUnicode_Join
_Py_FalseStruct
PyTuple_Type
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyDict_Next
PyExc_ValueError
_PyBytes_Join
PyErr_SetString
PyUnicode_New
PyExc_TimeoutError
PyThread_acquire_lock
PyDict_Size
PyDict_SetItemString
PyLong_FromString
PyTuple_New
_Py_NoneStruct
PyBytes_FromString
PyFloat_AsDouble
PyDict_Contains
PyThread_allocate_lock
PyErr_Clear
_PyObject_CallMethod_SizeT
PyObject_GetAttrString
_PyUnicode_ToLowercase
PyType_Ready
PyModule_Create2
PyList_New
PyObject_GetBuffer
PyObject_ClearWeakRefs
PyLong_FromUnicodeObject
PyLong_AsLong
_PyArg_ParseTuple_SizeT
PyThread_release_lock
PySlice_Unpack
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyLong_FromSsize_t
PyBytes_FromObject
PyErr_Occurred
PyBytes_AsString
PyImport_ImportModule
PySlice_Type
PyLong_AsUnsignedLong
_Py_BuildValue_SizeT
PyUnicode_Substring
PyObject_Free
_PyObject_New
PySlice_AdjustIndices

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead

vcruntime140

__std_type_info_destroy_list
memset
memmove
__C_specific_handler
memcpy

api-ms-win-crt-string-l1-1-0

isalpha
islower
isdigit
ispunct
isspace
iscntrl
isalnum
isprint
tolower
isupper
isgraph
toupper

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit

Exports

Exports

PyInit__regex

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

071d2e4b0e6f03f0124e5352259d773e

Headers

DLL Characteristics

File Characteristics

Imports

python39

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 186KB - Virtual size: 185KB

.rdata Size: 411KB - Virtual size: 411KB

.data Size: 41KB - Virtual size: 42KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 186KB - Virtual size: 185KB

.rdata
Size: 411KB - Virtual size: 411KB

.data
Size: 41KB - Virtual size: 42KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 4KB - Virtual size: 3KB