10db756e50fd2eb524eb2412578bd0c3adf8b62ff365a81f57dd42fc1eb02f16_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

10db756e50fd2eb524eb2412578bd0c3adf8b62ff365a81f57dd42fc1eb02f16_NeikiAnalytics.exe
Size

973KB
MD5

9234abe231107db99efa18c4d86a46f0
SHA1

c74a66f543f78c774271a34bae224f603f64eb0c
SHA256

10db756e50fd2eb524eb2412578bd0c3adf8b62ff365a81f57dd42fc1eb02f16
SHA512

61ef743423dd68a48a7116e5ff06c08366e1f0a1b4b9b069d0bad3ba6465462ba288a07f59b819140f5e0a86ab219057d9fdd808d3cd9c95f19f45e7ef0dbdde
SSDEEP

24576:+sWz490uV/7Z+7HAnGXuqXNs0YQAIc8Yw8z4bSY:R06886uAs0YQAIc8Yw8z4bZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10db756e50fd2eb524eb2412578bd0c3adf8b62ff365a81f57dd42fc1eb02f16_NeikiAnalytics.exe

Files

10db756e50fd2eb524eb2412578bd0c3adf8b62ff365a81f57dd42fc1eb02f16_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

6727257965514894a1379e8c2f124506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libintl-8

__printf__
libintl_asprintf
libintl_bindtextdomain
libintl_dgettext
libintl_fprintf
libintl_gettext
libintl_ngettext
libintl_setlocale
libintl_snprintf
libintl_sprintf
libintl_textdomain
libintl_vasprintf
libintl_vfprintf

zlib1

compress
compressBound
gzwrite
inflate
inflateEnd
inflateInit_
inflateReset
uncompress
zError

libzstd

ZSTD_decompress
ZSTD_isError

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetFullPathNameA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-convert-l1-1-0

mbrtowc
strtoul

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv

api-ms-win-crt-filesystem-l1-1-0

_fstat64
_stat64
_unlink

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc
realloc

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy
memmove
strchr
strrchr
strstr

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_assert
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_exit
_initialize_narrow_environment
_set_app_type
_initialize_wide_environment
_initterm
_set_invalid_parameter_handler
abort
exit
signal
strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
_close
_fileno
_fileno
_fseeki64
_isatty
_lseeki64
_open
_read
_write
fclose
feof
ferror
fflush
fopen
fputc
fputs
fread
fseek
ftell
fwrite
getc
putc
putchar
puts
rewind
tmpfile

api-ms-win-crt-string-l1-1-0

_strdup
isspace
memset
strcat
strcmp
strcpy
strlen
strncmp
strpbrk

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_gmtime64
_tzset

api-ms-win-crt-utility-l1-1-0

bsearch
qsort

Sections

.text
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6727257965514894a1379e8c2f124506

Headers

DLL Characteristics

File Characteristics

Imports

libintl-8

zlib1

libzstd

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

Sections

.text Size: 576KB - Virtual size: 575KB

.data Size: 5KB - Virtual size: 5KB

.rdata Size: 282KB - Virtual size: 282KB

/4 Size: 48KB - Virtual size: 47KB

.bss Size: - Virtual size: 15KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 54KB - Virtual size: 54KB

.text
Size: 576KB - Virtual size: 575KB

.data
Size: 5KB - Virtual size: 5KB

.rdata
Size: 282KB - Virtual size: 282KB

/4
Size: 48KB - Virtual size: 47KB

.bss
Size: - Virtual size: 15KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 54KB - Virtual size: 54KB