6f005a137abd6983776887ceb21f950482068d3006f613da1e986f4a157ebfc5_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6f005a137abd6983776887ceb21f950482068d3006f613da1e986f4a157ebfc5_NeikiAnalytics.exe
Size

59KB
MD5

e62331b3e55eee39e872e1aeb8a9fc70
SHA1

61b4b961cf939ab8690c198473cc8a51a0f7f162
SHA256

6f005a137abd6983776887ceb21f950482068d3006f613da1e986f4a157ebfc5
SHA512

c11dcd28e91e1cbd814b557788deed8b54b1f302cf020e06f5a0e2c781a6b0d7a95667261dfba1217d4c23e680a786957950fb1194d111013b60397036a5794b
SSDEEP

384:IbT+bS3+x6QFe9wJIFeXt+4JPccU9BmaQLRiTg68sBJTENnE9:IuBDmU7OGQ9K+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f005a137abd6983776887ceb21f950482068d3006f613da1e986f4a157ebfc5_NeikiAnalytics.exe

Files

6f005a137abd6983776887ceb21f950482068d3006f613da1e986f4a157ebfc5_NeikiAnalytics.exe
.dll windows:4 windows x64 arch:x64

b8b644e21efb649add7990192f9c8014

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
RaiseException

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memmove
strchr
strcmp
strcpy
strcspn
strlen

Exports

Exports

DllInitialize
PortNotification
ScsiDebugPrint
ScsiPortCompleteRequest
ScsiPortConvertPhysicalAddressToUlong
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFlushDma
ScsiPortFreeDeviceBase
ScsiPortGetBusData
ScsiPortGetDeviceBase
ScsiPortGetLogicalUnit
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetUncachedExtension
ScsiPortGetVirtualAddress
ScsiPortInitialize
ScsiPortIoMapTransfer
ScsiPortLogError
ScsiPortMoveMemory
ScsiPortNotification
ScsiPortQuerySystemTime
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUlong
ScsiPortReadPortBufferUshort
ScsiPortReadPortUchar
ScsiPortReadPortUlong
ScsiPortReadPortUshort
ScsiPortReadRegisterBufferUchar
ScsiPortReadRegisterBufferUlong
ScsiPortReadRegisterBufferUshort
ScsiPortReadRegisterUchar
ScsiPortReadRegisterUlong
ScsiPortReadRegisterUshort
ScsiPortSetBusDataByOffset
ScsiPortStallExecution
ScsiPortValidateRange
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUlong
ScsiPortWritePortBufferUshort
ScsiPortWritePortUchar
ScsiPortWritePortUlong
ScsiPortWritePortUshort
ScsiPortWriteRegisterBufferUchar
ScsiPortWriteRegisterBufferUlong
ScsiPortWriteRegisterBufferUshort
ScsiPortWriteRegisterUchar
ScsiPortWriteRegisterUlong
ScsiPortWriteRegisterUshort

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 320B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8b644e21efb649add7990192f9c8014

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

ucrtbase

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 64B

.rodata Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 384B

.pdata Size: 4KB - Virtual size: 180B

.xdata Size: 4KB - Virtual size: 200B

.bss Size: - Virtual size: 320B

.edata Size: 8KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 844B

.reloc Size: 4KB - Virtual size: 16B

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 64B

.rodata
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 384B

.pdata
Size: 4KB - Virtual size: 180B

.xdata
Size: 4KB - Virtual size: 200B

.bss
Size: - Virtual size: 320B

.edata
Size: 8KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 844B

.reloc
Size: 4KB - Virtual size: 16B