84afd76a7cd84d0b845ba4843d72eb1784d9016b6aa2283e50d407ff9563a1f2_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

84afd76a7cd84d0b845ba4843d72eb1784d9016b6aa2283e50d407ff9563a1f2_NeikiAnalytics.exe
Size

11KB
MD5

f31a35b21afba40dbb0c6587c0f876a0
SHA1

2420293152d197be9aaadc5c11c8db2ea112f02e
SHA256

84afd76a7cd84d0b845ba4843d72eb1784d9016b6aa2283e50d407ff9563a1f2
SHA512

733637ac46eb65121447ecd4c123b20ad0fcfcad56834ccd59baa7ffea7bc8139098fec0b700b6edefdede182708534407fde2e4cedb88d80b694ff41f400d2c
SSDEEP

192:3aWXd/TQxHGq3mWJiP5h0Tptf4Dkn3TBQWejOIp7UoDTggljsF7rPa:JXdLbCiOptf4DMTB4jL9DT+F7rPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84afd76a7cd84d0b845ba4843d72eb1784d9016b6aa2283e50d407ff9563a1f2_NeikiAnalytics.exe

Files

84afd76a7cd84d0b845ba4843d72eb1784d9016b6aa2283e50d407ff9563a1f2_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

339482c90f3f7bbb8927761a93eab8ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\common\OPlusDFXToolSDK\Build\Release_Shared_x86\libDigest.pdb

Imports

libcrypto-1_1

SHA256_Update
MD5_Init
SHA256_Init
SHA256_Final
MD5_Final
MD5_Update

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
memset

api-ms-win-crt-stdio-l1-1-0

fclose
_ftelli64
ferror
fread
fseek
rewind
__stdio_common_vsprintf_s
_fsopen

api-ms-win-crt-string-l1-1-0

strcat_s
strcpy_s

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

kernel32

UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId

Exports

Exports

Digest_GenerateHashFromBuffer
Digest_GenerateHashFromFile

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

339482c90f3f7bbb8927761a93eab8ea

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libcrypto-1_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 924B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 416B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 924B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 416B