1aa52c28f056d48d3cab44ac3aa528518fe231e5bae29dd1622c8b1f3125e3e3_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1aa52c28f056d48d3cab44ac3aa528518fe231e5bae29dd1622c8b1f3125e3e3_NeikiAnalytics.exe
Size

94KB
MD5

89ed78ebed09fec7b169e8dbb7beb090
SHA1

26578b9ce6ec79c5eb84ce34b611aa1a289ce402
SHA256

1aa52c28f056d48d3cab44ac3aa528518fe231e5bae29dd1622c8b1f3125e3e3
SHA512

235101900cd434c772ace76d65bbca254d7cff8e5dbe939533d3b9d5c199218fd45aa9b8c2346311cce096053f7be888d66bb4c86c09022bc94b046b499daddd
SSDEEP

1536:lajDOA1iYaOCviIwpo0DebmBRwndSdV947xKMuEhAtIjT+dxVJpC0Re:EHOA1jxCaVJgdSUVusAKT+ffpLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aa52c28f056d48d3cab44ac3aa528518fe231e5bae29dd1622c8b1f3125e3e3_NeikiAnalytics.exe

Files

1aa52c28f056d48d3cab44ac3aa528518fe231e5bae29dd1622c8b1f3125e3e3_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

f5a1b7efa5c496bc20b314b1f7b7b47f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\anthill3\var\jobs\projects\24952_243243\EEWrapper\EEWrapper\ReleaseCmd\EEWrapperCmd.pdb

Imports

sddenv

?GetAppPath@SDDEnv@@SAAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
??0SDDEnv@@QAE@AAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CheckEnvVariables@SDDEnv@@QAE?AW4eErrorCode@1@XZ
?GetFamilyDir@SDDEnv@@QAEAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetMGC_HOME@SDDEnv@@QAEAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetSDD_PLATFORM@SDDEnv@@QAEAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetSDD_HOME@SDDEnv@@QAEAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
??1SDDEnv@@QAE@XZ
?CmdExecRunCmd@SDDEnv@@QAEHPBDAAK@Z
?GetBinDir@SDDEnv@@QAEAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?CmdExecRunCmdPipes@SDDEnv@@QAEHPBDAAK@Z

mfc90

ord2505
ord820
ord798
ord2082
ord4029
ord2539
ord910
ord4311
ord5997
ord5963
ord4392
ord2481
ord300
ord316
ord1611
ord3178
ord305
ord3213
ord6613
ord1603
ord601
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord817
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord589
ord310
ord793
ord1046
ord2447
ord800
ord1183

msvcr90

_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__iob_func
fprintf
_except_handler4_common
_controlfp_s
_invoke_watson
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter

kernel32

Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

shlwapi

PathFileExistsA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f5a1b7efa5c496bc20b314b1f7b7b47f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

sddenv

mfc90

msvcr90

kernel32

shlwapi

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 75KB - Virtual size: 76KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 75KB - Virtual size: 76KB