3dff7df6539b4cd064e3b46e1438961b079d62843a8642818fc334d14c45e09d_NeikiAnalytics[.]exe

General

Target

3dff7df6539b4cd064e3b46e1438961b079d62843a8642818fc334d14c45e09d_NeikiAnalytics.exe
Size

34KB
MD5

9f8d7a0c05d9f9b01dbd3f676198ad60
SHA1

e5d9d4db5e0689b4b285ec9577cf361be763ba0a
SHA256

3dff7df6539b4cd064e3b46e1438961b079d62843a8642818fc334d14c45e09d
SHA512

91de651903a792cea87dbca939b940de33037a3980bd14fd52117a158678ff3f33a41bb6f51b73ea9b8cb0dde7cbcb7a56c4efea87ff2d7d9dec07aa42d1677e
SSDEEP

768:uXOjzs9BdVg3aeP/sSPK22tRiz5kdrnljpqFHBPm7snSIM:uXGz4gZP/sSS2N5ClNqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dff7df6539b4cd064e3b46e1438961b079d62843a8642818fc334d14c45e09d_NeikiAnalytics.exe

Files

3dff7df6539b4cd064e3b46e1438961b079d62843a8642818fc334d14c45e09d_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

5bac2150da0eaa2f62a85b2795dfa3b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr100

ftell
fseek
getc
atoi
puts
fgets
free
malloc
realloc
memmove
memchr
_amsg_exit
__getmainargs
_cexit
_exit
fread
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
exit
vfprintf
__iob_func
putc
bsearch
fwrite
printf
strchr
fclose
fprintf
fopen
_errno
fputs
strerror
sscanf
_XcptFilter
fputc
memcpy
memset

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bac2150da0eaa2f62a85b2795dfa3b4

Headers

DLL Characteristics

File Characteristics

Imports

msvcr100

kernel32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 2KB