78a9bf1bbfc6bc2ce3dbcde5cbe7598c1ac7b77eae677793c104ff144b1dd195_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

78a9bf1bbfc6bc2ce3dbcde5cbe7598c1ac7b77eae677793c104ff144b1dd195_NeikiAnalytics.exe
Size

4.9MB
MD5

68369b984319ca775552aa74a1ea7740
SHA1

033069dd5dd1a874230f26e7565679c750fa0723
SHA256

78a9bf1bbfc6bc2ce3dbcde5cbe7598c1ac7b77eae677793c104ff144b1dd195
SHA512

1baa205a0597ba312a7556fd2f2a84f6737e826d9d814cb173390241f8e895a97c63de1fd0d485118044a53c08cfd94bb89aaaa641506a7ebdc83f802acb21d4
SSDEEP

49152:26XhsKm8q4cgD/pRt6xI9X1WnGVAS2eoTIiShpwWQuVi6E0XDy+yl:Dmzh48nGVA1TIiZB6E0XR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a9bf1bbfc6bc2ce3dbcde5cbe7598c1ac7b77eae677793c104ff144b1dd195_NeikiAnalytics.exe

Files

78a9bf1bbfc6bc2ce3dbcde5cbe7598c1ac7b77eae677793c104ff144b1dd195_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

ccf50b71e1f7a0774fa8aeabe6115c84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\b\w\65c23eb824bd1ed5\nvflow\_build\windows-x86_64\release\nvflow_rtx.pdb

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
__C_specific_handler
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsProcessorFeaturePresent
WriteFile
WriteConsoleW
HeapReAlloc
HeapSize
GetStringTypeW
FlushFileBuffers
SetStdHandle
CreateFileW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlUnwindEx
EncodePointer
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
CloseHandle
GetStdHandle
GetFileType
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
HeapAlloc
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo

Exports

Exports

NvFlowGetOpList

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccf50b71e1f7a0774fa8aeabe6115c84

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 181KB - Virtual size: 180KB

.rdata Size: 4.6MB - Virtual size: 4.6MB

.data Size: 80KB - Virtual size: 84KB

.pdata Size: 7KB - Virtual size: 6KB

_RDATA Size: 1024B - Virtual size: 716B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 181KB - Virtual size: 180KB

.rdata
Size: 4.6MB - Virtual size: 4.6MB

.data
Size: 80KB - Virtual size: 84KB

.pdata
Size: 7KB - Virtual size: 6KB

_RDATA
Size: 1024B - Virtual size: 716B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 11KB - Virtual size: 10KB