34601a98274f2888c3dd998281714a6aec252155340f43d884e4ac0705e40efc_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

34601a98274f2888c3dd998281714a6aec252155340f43d884e4ac0705e40efc_NeikiAnalytics.exe
Size

315KB
MD5

7f413eb36853e4c33751a1818a761400
SHA1

6dc200b08e70dee729c9cb6fde09ea0f5e515e87
SHA256

34601a98274f2888c3dd998281714a6aec252155340f43d884e4ac0705e40efc
SHA512

e901c3e989451e5d84d4a5535229c744e676f82f8ab8deb0617f64652ffaeb62950a2978797071f0752a64d46e54e6b2697a822e1a42974a555309f179ce0fc3
SSDEEP

6144:9Focmoh0tHBEm2etVMwsQxHbqyO/ihpHSN:eptT2eswseeyHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34601a98274f2888c3dd998281714a6aec252155340f43d884e4ac0705e40efc_NeikiAnalytics.exe

Files

34601a98274f2888c3dd998281714a6aec252155340f43d884e4ac0705e40efc_NeikiAnalytics.exe
.dll regsvr32 windows:6 windows x86 arch:x86

1c658bb71da4737acc0a9e0da3889b4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmime.pdb

Imports

ntdll

wcstombs
_allshr
_allmul
_alldiv
memset
memcpy
_CIpow
ord1
_CIsin
_CIsqrt

msvcrt

_XcptFilter
rand
free
malloc
_initterm
time
srand
_purecall
_amsg_exit
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
lstrlenA
DisableThreadLibraryCalls
CreateThread
CreateEventA
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
CloseHandle
WaitForSingleObject
SetEvent
GetCurrentThreadId
Sleep
SetThreadPriority

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod

advapi32

RegEnumKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA

ole32

StringFromCLSID
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal

user32

GetForegroundWindow
IsWindow
GetDesktopWindow

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c658bb71da4737acc0a9e0da3889b4d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

msvcrt

kernel32

winmm

advapi32

ole32

user32

dsound

Exports

Exports

Sections

.text Size: 162KB - Virtual size: 162KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 146KB - Virtual size: 145KB

.text
Size: 162KB - Virtual size: 162KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 146KB - Virtual size: 145KB