20446f57f01387a949f2c53a512f5ee3d14fe8fda01d4d331829801d2c4b1186_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

20446f57f01387a949f2c53a512f5ee3d14fe8fda01d4d331829801d2c4b1186_NeikiAnalytics.exe
Size

404KB
MD5

df8c162a5b9f0059981c39db8edb8a10
SHA1

dd2b41efaa756222f5d536b1a6d9405154fc0559
SHA256

20446f57f01387a949f2c53a512f5ee3d14fe8fda01d4d331829801d2c4b1186
SHA512

fef830b2ed5281c0720edd1bf010623d30e56e8bb7fa0c09fcb87a365112cbc06d003ac5f63b3407b0be26adddec3befba9781a9a0bb5421bc96f103d7a3c349
SSDEEP

6144:rr78a+jA2L9fSSgrJa6dd72m0itHTob0acLdAnq4QfE:rr46Ja6H728tHToD+d+X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20446f57f01387a949f2c53a512f5ee3d14fe8fda01d4d331829801d2c4b1186_NeikiAnalytics.exe

Files

20446f57f01387a949f2c53a512f5ee3d14fe8fda01d4d331829801d2c4b1186_NeikiAnalytics.exe
.exe windows:6 windows x64 arch:x64

a53c843397c996138b09c88e1a715d29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\PatreonLauncher\x64\Release\PatreonLauncher.pdb

Imports

kernel32

SetEvent
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LocalFree
LCMapStringEx
GetCPInfo
ReadFile
WriteFile
PeekNamedPipe
CreateFileW
GetLastError
CloseHandle
GetCurrentProcessId
WaitNamedPipeW
lstrlenW
GetModuleFileNameW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
WaitForSingleObject
LoadLibraryW
GetProcAddress
GetModuleHandleA
TlsAlloc
GetStdHandle
FormatMessageW
RtlUnwind
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WaitForSingleObjectEx
GetExitCodeThread

oleaut32

VariantClear
GetErrorInfo
SetErrorInfo
SysFreeString
SysAllocString
SysStringLen

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey

ole32

CoCreateFreeThreadedMarshaler
CoInitializeEx

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a53c843397c996138b09c88e1a715d29

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

oleaut32

advapi32

ole32

Sections

.text Size: 284KB - Virtual size: 283KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 15KB - Virtual size: 239KB

.pdata Size: 14KB - Virtual size: 14KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 284KB - Virtual size: 283KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 15KB - Virtual size: 239KB

.pdata
Size: 14KB - Virtual size: 14KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 2KB