5ed069aea5fe3a86530594354867b2807cacbe064040444ed23b22d088dffd80_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5ed069aea5fe3a86530594354867b2807cacbe064040444ed23b22d088dffd80_NeikiAnalytics.exe
Size

24KB
MD5

5af255db6f07fed2883e1d8aac92dbd0
SHA1

8045010379980fa8462ac9103c96560f846fd722
SHA256

5ed069aea5fe3a86530594354867b2807cacbe064040444ed23b22d088dffd80
SHA512

6803a81ef8d60d3cc75e4fb27178ac67de500b6ea2cfa92ed98fe4ca3b78b8625988ff4265f108d19066e3ca39a877153496b3d99b86d20ead64070318bc4160
SSDEEP

192:6DRiorf6fX1eje9ZnyIa3j1ivp5Dcx9kT:joOFeje95yIa3j1ivp5Dcx6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed069aea5fe3a86530594354867b2807cacbe064040444ed23b22d088dffd80_NeikiAnalytics.exe

Files

5ed069aea5fe3a86530594354867b2807cacbe064040444ed23b22d088dffd80_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

38381ce212d41c86115914355f54aceb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord668
ord665
ord800
ord1979
ord5442
ord5186
ord860
ord540
ord350
ord354
ord2770
ord356
ord537
ord535
ord922
ord858
ord4277
ord2763
ord4203
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord3663
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord6467
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord3616
ord3127
ord5651
ord5307
ord825
ord269
ord826
ord600
ord1578
ord1116

msvcrt

??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
_EH_prolog
__CxxFrameHandler

kernel32

LocalFree
GetModuleHandleA
GetModuleFileNameA
LocalAlloc

Exports

Exports

iChangePIN
iDoDebit
iDoDebit_HSM_Step1
iDoDebit_HSM_Step2
iReadCard
iReadCardBas
iReadCardBas_HSM_Step1
iReadCardBas_HSM_Step2
iReadCard_HSM_Step1
iReadCard_HSM_Step2
iReadDebitRecord
iReloadPIN
iReloadPIN_HSM_Step1
iReloadPIN_HSM_Step2
iReloadPIN_HSM_Step3
iUnblockPIN
iUnblockPIN_HSM_Step1
iUnblockPIN_HSM_Step2
iUnblockPIN_HSM_Step3
iVerifyPIN
iWriteCard
iWriteCard_HSM_Step1
iWriteCard_HSM_Step2

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38381ce212d41c86115914355f54aceb

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 4KB - Virtual size: 584B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 4KB - Virtual size: 584B