4b4ce9a163bd26edee5f796ee3ac7642746056a8ff0c61040edab29f2cf77384_NeikiAnalytics[.]exe

General

Target

4b4ce9a163bd26edee5f796ee3ac7642746056a8ff0c61040edab29f2cf77384_NeikiAnalytics.exe
Size

38KB
MD5

ca25da6972f37da6151e9fabdf013a20
SHA1

bea4be2e25cbd8bc79ad472e6601bd58b3c69001
SHA256

4b4ce9a163bd26edee5f796ee3ac7642746056a8ff0c61040edab29f2cf77384
SHA512

7087a11ed83f3cc6161ef74b7ff3b283f8ef126e654b8fdb21083f742eacef0665742120b06b411f7f4e266b9162a09f2806b15db69672096a3062bc8b342a31
SSDEEP

768:rB4AtzdkVTmB4ebkHRheA6R2lVJvBIMAi9JhMMThdIO7T:d4W+TPnwSvHTIO7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b4ce9a163bd26edee5f796ee3ac7642746056a8ff0c61040edab29f2cf77384_NeikiAnalytics.exe

Files

4b4ce9a163bd26edee5f796ee3ac7642746056a8ff0c61040edab29f2cf77384_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

875918425b99856d2fba857d82db3c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

memset
memcpy
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_initialize_narrow_environment

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Exports

Exports

adler32
adler32_combine
adler32_z
crc32
crc32_combine
crc32_combine_gen
crc32_combine_op
crc32_z
get_crc_table
inflate
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

875918425b99856d2fba857d82db3c48

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 976B

.reloc Size: 1024B - Virtual size: 732B

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 976B

.reloc
Size: 1024B - Virtual size: 732B