5e15ca21e730ec544eeac6b6c56fb06341d2ced6a32e9650e7686a3566807f6b_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5e15ca21e730ec544eeac6b6c56fb06341d2ced6a32e9650e7686a3566807f6b_NeikiAnalytics.exe
Size

21KB
MD5

edd7b6148a08c610a6ea59cb2ca36720
SHA1

5799275a0761e98cf7aa164bf608a8a64034614c
SHA256

5e15ca21e730ec544eeac6b6c56fb06341d2ced6a32e9650e7686a3566807f6b
SHA512

5d1614f5e1f941181bb000911b42234824d48ed65149a2813cd96d8ddd66ccd6afb42e9aab2f9434a2c38af4ac285de31f10e4f3e7767dc3555852a493319a50
SSDEEP

384:jA4n5VlOGoy5+zTyO9pw08ANZg+0Hfu60dgpeBxg:kM9v+zTyO9KArV0WUYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e15ca21e730ec544eeac6b6c56fb06341d2ced6a32e9650e7686a3566807f6b_NeikiAnalytics.exe

Files

5e15ca21e730ec544eeac6b6c56fb06341d2ced6a32e9650e7686a3566807f6b_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

13833ab31aedb9ff2d74842179c4e1d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libpypy3-c

PyPyErr_Format
PyPyUnicode_Substring
_PyPyDateTime_Import
PyPyModule_AddStringConstant
PyPyDateTimeAPI
PyPyErr_SetString
PyPyUnicode_AsUTF8AndSize
PyPyExc_TypeError
PyPyNumber_Add
PyPyModule_Create2
PyPyExc_ValueError
PyPyUnicode_FromString
PyPyModule_AddObject
PyPyTuple_Pack
PyPyDateTime_Check
PyPyLong_FromLong
PyPyType_Ready
PyPyArg_ParseTuple
PyPyType_GenericNew
_PyPy_Dealloc
_PyPy_NoneStruct

kernel32

GetCurrentProcessId
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlLookupFunctionEntry

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit_ciso8601

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13833ab31aedb9ff2d74842179c4e1d6

Headers

DLL Characteristics

File Characteristics

Imports

libpypy3-c

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 1KB - Virtual size: 25KB

.pdata Size: 1024B - Virtual size: 684B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 124B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 1KB - Virtual size: 25KB

.pdata
Size: 1024B - Virtual size: 684B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 124B