58a52b1c0a4d496b203d5ef784d5aca1f3492492cf4f006e9800c10a739f5dc7_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

58a52b1c0a4d496b203d5ef784d5aca1f3492492cf4f006e9800c10a739f5dc7_NeikiAnalytics.exe
Size

67KB
MD5

0672f7bad76a40d88625658cec65b9c0
SHA1

f14ca4cc4db0f78ab4ed8cb4407e5436582ed7e7
SHA256

58a52b1c0a4d496b203d5ef784d5aca1f3492492cf4f006e9800c10a739f5dc7
SHA512

532ed75fabddf69a4a6c12bf35d8f0a5b2ee332320fa0442d4744749032aa6e39553864f1e6c9e4f5fc7248a40381934153eae8653a93980f353c72675135333
SSDEEP

1536:xzVBKGm3bMAn+BWR+6TLZBZc5guwV95ZmviG69KZ0aqpGsVn:xzVVccIR+6TLZBZc5guY95ZmviG69KZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58a52b1c0a4d496b203d5ef784d5aca1f3492492cf4f006e9800c10a739f5dc7_NeikiAnalytics.exe

Files

58a52b1c0a4d496b203d5ef784d5aca1f3492492cf4f006e9800c10a739f5dc7_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

5eb3902928dc12eca5efb390b37e116d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

harbour-34

hb_errRT_BASE_SubstR
hb_fileDetach
hb_fileFromHandle
hb_fileParam
hb_fileParamGet
hb_fileWrite
hb_fsError
hb_gcAllocate
hb_gcDummyMark
hb_itemClear
hb_itemGetPtrGC
hb_itemGetWriteCL
hb_itemNew
hb_itemPutPtrGC
hb_parclen
hb_parcx
hb_parnidef
hb_parnint
hb_parnl
hb_parnldef
hb_parns
hb_retc_null
hb_retclen_buffer
hb_stackReturnItem
hb_stornl
hb_vmPush
hb_vmPushEvalSym
hb_vmPushString
hb_vmRequestReenter
hb_vmRequestRestore
hb_vmSend

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
calloc
free
fwrite
malloc
memchr
memcmp
memcpy
memset
strlen
strncmp
abort
vfprintf

user32

MessageBoxW

Exports

Exports

HB_FUN_XDL_BDIFF
HB_FUN_XDL_BDIFF_TGSIZE
HB_FUN_XDL_BPATCH
HB_FUN_XDL_DIFF
HB_FUN_XDL_INIT_MMFILE
HB_FUN_XDL_MMFILE_CMP
HB_FUN_XDL_MMFILE_COMPACT
HB_FUN_XDL_MMFILE_ISCOMPACT
HB_FUN_XDL_MMFILE_SIZE
HB_FUN_XDL_PATCH
HB_FUN_XDL_RABDIFF
HB_FUN_XDL_READ_MMFILE
HB_FUN_XDL_SEEK_MMFILE
HB_FUN_XDL_WRITE_MMFILE
HB_FUN___HBEXTERN__HBXDIFF__

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eb3902928dc12eca5efb390b37e116d

Headers

DLL Characteristics

File Characteristics

Imports

harbour-34

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 46KB

.data Size: 512B - Virtual size: 324B

.rdata Size: 11KB - Virtual size: 10KB

.bss Size: - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 537B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 800B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 46KB

.data
Size: 512B - Virtual size: 324B

.rdata
Size: 11KB - Virtual size: 10KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 537B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 800B

.reloc
Size: 2KB - Virtual size: 1KB