638f159fc09789ff61b43b7db5a4bf62789c83e4cd980d84ab4d755cad8c6461_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

638f159fc09789ff61b43b7db5a4bf62789c83e4cd980d84ab4d755cad8c6461_NeikiAnalytics.exe
Size

63KB
MD5

3b64d739d84436dfe5e23330d589c050
SHA1

cd5578bb3b6c4308ade104bf875c9ceda1b037df
SHA256

638f159fc09789ff61b43b7db5a4bf62789c83e4cd980d84ab4d755cad8c6461
SHA512

5a84942a65448ea95224cd9df55186a3903b9727811cba2c6ecbfd9a62756309cfe84eac87fe166909599e9a3f99aab769e9c613bed57e7f5b85be1566fa0166
SSDEEP

1536:osa8k3AyKv5dXU1LLEvFvnjcgd002dads5:o7ADnXU13EBjBd002dj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
638f159fc09789ff61b43b7db5a4bf62789c83e4cd980d84ab4d755cad8c6461_NeikiAnalytics.exe

Files

638f159fc09789ff61b43b7db5a4bf62789c83e4cd980d84ab4d755cad8c6461_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

d69c0bb6565023e1d2037859f022c36a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python36

PyDict_GetItemWithError
Py_GetVersion
PyObject_GetAttr
PyUnicode_FromOrdinal
_Py_NoneStruct
PyTuple_New
PyDict_SetItemString
PyDict_Size
PyFrame_Type
PyExc_AttributeError
PyTuple_GetSlice
PyErr_SetString
PyNumber_Add
PyErr_WarnFormat
PyEval_EvalCodeEx
PyExc_ValueError
_Py_CheckRecursiveCall
PyDict_Next
PyErr_Format
PyDict_Type
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyTuple_GetItem
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Free
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyObject_GC_Del
PyLong_AsLong
PyObject_ClearWeakRefs
PyObject_Not
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
PyExc_UnboundLocalError
PyList_Append
PyUnicode_Decode
PyWrapperDescr_Type
PyCode_New
PyCapsule_New
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyNumber_Index
PyNumber_Negative
PyList_Type
PyDict_GetItemString
PyObject_GetItem
PyUnicode_FromKindAndData
PyModuleDef_Init
PyObject_GC_Track
PyBytes_FromStringAndSize
PyExc_NotImplementedError
PyUnicode_Compare
PyExc_TypeError
PyMem_Realloc
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
PyExc_IndexError
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
_PyObject_GC_New
PyType_Modified
PyMethodDescr_Type
PyEval_EvalFrameEx
PyUnicode_FromString
_PyType_Lookup
PyUnicode_Format
PyObject_Call
PyObject_Repr
PyObject_DelItem
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyUnicode_Concat
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyMethod_New
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyTraceBack_Here
PyObject_GenericGetAttr
PyNumber_Remainder
PyLong_FromSsize_t
PyErr_Occurred
PyUnicode_AsUnicode
PyImport_ImportModuleLevelObject
PyImport_ImportModule
PyExc_KeyError
PyExc_DeprecationWarning
PyLong_AsSsize_t
PyFrame_New
PyFunction_Type
PyErr_WarnEx
PyErr_SetObject
_Py_CheckRecursionLimit
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
PyErr_Clear
PyBaseObject_Type

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

Exports

Exports

PyInit_Scanners

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d69c0bb6565023e1d2037859f022c36a

Headers

DLL Characteristics

File Characteristics

Imports

python36

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 11KB - Virtual size: 12KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 11KB - Virtual size: 12KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 4KB - Virtual size: 3KB