6ad581b3ac9c905886133e2b8e1954cce74b448ce59e49b00e93d3a863dae809_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6ad581b3ac9c905886133e2b8e1954cce74b448ce59e49b00e93d3a863dae809_NeikiAnalytics.exe
Size

74KB
MD5

a619831881a80e056a65e15e87c1eff0
SHA1

1ff069b43393634b9770e64bff032732224cffc6
SHA256

6ad581b3ac9c905886133e2b8e1954cce74b448ce59e49b00e93d3a863dae809
SHA512

d6a674a9693d11974cfc09a16d6daba7011d171c891616603f1ada6f0e793a6968ed39f0f4442d5551ac0482037dbb91de1259d214feed294eaee7641c8e74be
SSDEEP

1536:zV7qShTOFTmGhCa1rheDi6FJjHbeyaGt9SALCe:zDYTD3f1AJDbvjt9SAF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ad581b3ac9c905886133e2b8e1954cce74b448ce59e49b00e93d3a863dae809_NeikiAnalytics.exe

Files

6ad581b3ac9c905886133e2b8e1954cce74b448ce59e49b00e93d3a863dae809_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

2a33e331554b4b26b145b60d5b642a63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

t:\home\marcusc\basp6\baspin\objfre_wlh_x86\i386\baspin.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

kernel32

CopyFileA
lstrcatA
GetWindowsDirectoryA
SetFileAttributesA
lstrcmpiW
WideCharToMultiByte
lstrlenA
GetCurrentDirectoryA
MoveFileExA
CloseHandle
CreateMutexA
lstrcmpiA
GetVersionExA
lstrcpyA
GetLastError
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
SleepEx
GetCurrentProcess
UnhandledExceptionFilter

gdi32

GetStockObject

user32

PostQuitMessage
DefWindowProcA
CreateWindowExA
RegisterClassA
LoadCursorA
LockSetForegroundWindow
DestroyWindow
ShowWindow
SendMessageA
GetDlgItem
CreateDialogParamA
wsprintfA
LoadIconA
SetForegroundWindow
MessageBoxA
ExitWindowsEx

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
memset
__getmainargs
_cexit
_exit
_XcptFilter
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead

comctl32

ord17

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemFree

setupapi

SetupCopyOEMInfA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a33e331554b4b26b145b60d5b642a63

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

ole32

setupapi

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 60KB - Virtual size: 61KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 816B

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 60KB - Virtual size: 61KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 816B