737cd5cde680399f23f455a70ab134c956100bc70b1b4f7ff633410ca57585d7_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

737cd5cde680399f23f455a70ab134c956100bc70b1b4f7ff633410ca57585d7_NeikiAnalytics.exe
Size

84KB
MD5

19279e6f70e7cf3ce9ec3390216024f0
SHA1

9dc4be5a6b71b68e0cd45c4fde0dedaece39357c
SHA256

737cd5cde680399f23f455a70ab134c956100bc70b1b4f7ff633410ca57585d7
SHA512

e3b763a98284a573635bc2e9546b23ed39641f16942467bd31721fb7ecbfc456eadfdacc05cd181e49e26e87551dcb04c291dd86506b5ceef848a8cf33952d7c
SSDEEP

1536:aWo6rGFqR1trGGbhxxbxPMdDHPcrR3kh8pKmZEcIMvaG:aWDbtmrPcV3E8p/EcIMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737cd5cde680399f23f455a70ab134c956100bc70b1b4f7ff633410ca57585d7_NeikiAnalytics.exe

Files

737cd5cde680399f23f455a70ab134c956100bc70b1b4f7ff633410ca57585d7_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

4d06c0c5701b778b4693965de4939e27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

proj-5c0577c439272204013c9c395fdaabf2

proj_context_get_database_metadata
proj_get_crs_list_parameters_destroy
proj_get_crs_info_list_from_database
proj_get_units_from_database
proj_string_list_destroy
proj_get_codes_from_database
proj_get_crs_list_parameters_create
proj_crs_info_list_destroy
proj_get_authorities_from_database
proj_unit_list_destroy

python39

Py_GetVersion
PyObject_GetAttr
PyModule_GetName
PyFloat_AsDouble
PyBytes_AsStringAndSize
_Py_NoneStruct
PyTuple_New
PySequence_Contains
PyDict_SetItemString
PyDict_Size
PyFloat_FromDouble
PyExc_AttributeError
PyTuple_GetSlice
PyErr_SetString
PyIter_Next
PyObject_GetIter
PyErr_WarnFormat
PyExc_ValueError
PyDict_Next
PyErr_Format
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyImport_GetModule
PyFloat_Type
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyExc_OverflowError
PyCode_NewWithPosOnlyArgs
_Py_Dealloc
PyTuple_GetItem
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Free
PyInterpreterState_GetID
PyCapsule_GetPointer
PyObject_GC_Del
PyLong_AsLong
PyObject_ClearWeakRefs
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyList_Append
PyUnicode_Decode
PyException_SetTraceback
_PyObject_GenericGetAttrWithDict
PyCapsule_GetName
PyDict_SetItem
PyDict_New
PyUnicode_Type
_PyDict_GetItem_KnownHash
PyObject_IsInstance
PyMem_Free
PyExc_StopIteration
PyList_Type
PyErr_NoMemory
PyDict_GetItemString
PyObject_GetItem
PyModuleDef_Init
PyObject_GC_Track
PyBytes_FromStringAndSize
PyUnicode_Compare
PyExc_TypeError
PyMem_Realloc
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyByteArray_empty_string
_PyUnicode_Ready
PyMem_Malloc
Py_EnterRecursiveCall
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
_PyObject_GC_New
PyUnicode_FromString
PyObject_Size
PyObject_Call
PyByteArray_Type
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyDict_GetItemWithError
PyUnicode_Concat
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyMethod_New
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyTraceBack_Here
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyImport_ImportModule
Py_LeaveRecursiveCall
PyExc_KeyError
PyExc_DeprecationWarning
PyUnicode_Replace
PyFrame_New
PyCapsule_IsValid
PyExc_RuntimeWarning
PyErr_WarnEx
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
_PyDict_NewPresized
PyBaseObject_Type
PyErr_ExceptionMatches

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

strrchr
__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm

Exports

Exports

PyInit_database

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d06c0c5701b778b4693965de4939e27

Headers

DLL Characteristics

File Characteristics

Imports

proj-5c0577c439272204013c9c395fdaabf2

python39

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 58KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 59KB - Virtual size: 58KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 5KB - Virtual size: 4KB