737b32412f2aa85267e134ca6490875f47c68fd3d90de6b5537d26151bfd77b1_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

737b32412f2aa85267e134ca6490875f47c68fd3d90de6b5537d26151bfd77b1_NeikiAnalytics.exe
Size

177KB
MD5

b813913fd1768df71384c46a43773be0
SHA1

817f083541e8c10bff1ab232189a5402f6d99770
SHA256

737b32412f2aa85267e134ca6490875f47c68fd3d90de6b5537d26151bfd77b1
SHA512

46e5945a56681f9651d69175ff6f94425704f5cb3713d34648311c31f3aacee5b1bbb77d4dcb8e757598fb0eeb30eb032417fb4f72c5c3dc40d19224266bfc3f
SSDEEP

3072:JaZeTin1q5sZ3n3QZHWF50jTDrktWqJkIydY5zv6pHmqdppy79:WUEHQCG/8AIQY5z85py79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737b32412f2aa85267e134ca6490875f47c68fd3d90de6b5537d26151bfd77b1_NeikiAnalytics.exe

Files

737b32412f2aa85267e134ca6490875f47c68fd3d90de6b5537d26151bfd77b1_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

c980bf62f8db2832c82cbbfac7189531

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\constructicon\builds\gfx\three\21.30\drivers\pxproxy\umd9\build\wNow\B_rel\atiu9pag.pdb

Imports

kernel32

CreateFileW
InitializeCriticalSection
GetConsoleMode
DeleteCriticalSection
GetProcAddress
DebugBreak
DecodePointer
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
FreeLibrary
ReadFile
GetModuleFileNameA
GetFileInformationByHandle
GetLastError
CreateFileA
GetSystemDirectoryA
CloseHandle
VerifyVersionInfoA
SetLastError
GetModuleFileNameW
LoadLibraryW
VerSetConditionMask
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
InterlockedFlushSList
RaiseException
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
WideCharToMultiByte
MultiByteToWideChar
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
WriteConsoleW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExW

Exports

Exports

OpenAdapter
XopOpenAdapter9
XopOpenAdapters9
XopQueryAdapters9

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c980bf62f8db2832c82cbbfac7189531

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

version

advapi32

Exports

Exports

Sections

.text Size: 138KB - Virtual size: 137KB

.data Size: 2KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 138KB - Virtual size: 137KB

.data
Size: 2KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB