666f076bbde13172d16e5866f6d92f13449c0f30167e2e84a88a23a6a9738724_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

666f076bbde13172d16e5866f6d92f13449c0f30167e2e84a88a23a6a9738724_NeikiAnalytics.exe
Size

34KB
MD5

d03cc9dc2a37a532c874330039e071f0
SHA1

c3bec4387c994e4b2e2ccbd48b7360b3d983f89a
SHA256

666f076bbde13172d16e5866f6d92f13449c0f30167e2e84a88a23a6a9738724
SHA512

b728179d5ab922d76bbf0f4da49ff81149e3cd29cdc0c64bda18e0d71dbb4a6e84e05ea0e91281715b9cf9cd3cdde7864d9e31063123ddc0ad048013ea605d8f
SSDEEP

768:a4wkqkdcSq7WOMS6WgoI6023MKKIgs+n:/DlsWLmI6023MKdqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666f076bbde13172d16e5866f6d92f13449c0f30167e2e84a88a23a6a9738724_NeikiAnalytics.exe

Files

666f076bbde13172d16e5866f6d92f13449c0f30167e2e84a88a23a6a9738724_NeikiAnalytics.exe
.exe windows:6 windows x64 arch:x64

618c133950ea4e55f1b49fe44e0874ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

llama

ggml_print_backtrace
llama_sample_typical
llama_sample_tail_free
llama_sample_min_p
llama_sample_top_p
llama_sample_top_k
llama_sample_softmax
llama_sample_repetition_penalties
ggml_time_init

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__current_exception
__current_exception_context
memset
memcpy
__C_specific_handler
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_exit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_initterm_e
_initialize_narrow_environment
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_app_type
abort
_initterm
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vfprintf
fflush
__acrt_iob_func

api-ms-win-crt-math-l1-1-0

__setusermatherr
logf

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
free

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

UnhandledExceptionFilter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

618c133950ea4e55f1b49fe44e0874ba

Headers

DLL Characteristics

File Characteristics

Imports

llama

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 816B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 84B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 816B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 84B