0220811370cb5b1fd8133d2ff5dfed8add85fa3cfe6346fb538634210cfcdf30_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0220811370cb5b1fd8133d2ff5dfed8add85fa3cfe6346fb538634210cfcdf30_NeikiAnalytics.exe
Size

204KB
MD5

35762edc9de4849b6f42d9d74b5f7680
SHA1

53cb308c2377b426b784b87c57a1c057f58cc630
SHA256

0220811370cb5b1fd8133d2ff5dfed8add85fa3cfe6346fb538634210cfcdf30
SHA512

fbff59e91818530639c0eb6b0b0ab0e4e276153c026e57bef0f4db994097657524a66ba98c9b0409b30f2ed265fcc060f965e668571df3bf89bd3334df70f775
SSDEEP

3072:5YVNOK6nk+8F7teCMxcOmg2f45HYoehZBqFCAj9Xp9GAD:SOK6stvjM4TBnAdpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0220811370cb5b1fd8133d2ff5dfed8add85fa3cfe6346fb538634210cfcdf30_NeikiAnalytics.exe

Files

0220811370cb5b1fd8133d2ff5dfed8add85fa3cfe6346fb538634210cfcdf30_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

51b88739fddec59fd0d012d8aa47c189

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Jenkins_Master_Root\workspace\META_Customer_Release\Customer_META_DLL\CustomerRelease\MetaAppController.pdb

Imports

kernel32

InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
InterlockedExchange
Sleep
InterlockedCompareExchange

msvcr90

_malloc_crt
free
_encoded_null
_decode_pointer
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??2@YAPAXI@Z
__CxxFrameHandler3
fclose
??3@YAXPAX@Z
__iob_func
_initterm

pocofoundation

??9DirectoryIterator@Poco@@QBE_NABV01@@Z
?createDirectories@File@Poco@@QAEXXZ
?copyTo@File@Poco@@QBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?canRead@File@Poco@@QBE_NXZ
?remove@File@Poco@@QAEX_N@Z
??GDateTime@Poco@@QBE?AVTimespan@1@ABV01@@Z
??0Timespan@Poco@@QAE@HHHHH@Z
?getLastModified@File@Poco@@QBE?AVTimestamp@2@XZ
??0DateTime@Poco@@QAE@ABVTimestamp@1@@Z
??0DateTime@Poco@@QAE@XZ
??1Timestamp@Poco@@QAE@XZ
??0File@Poco@@QAE@PBD@Z
??0Path@Poco@@QAE@XZ
??1Path@Poco@@QAE@XZ
??1Timespan@Poco@@QAE@XZ
??1DateTime@Poco@@QAE@XZ
??0DirectoryIterator@Poco@@QAE@XZ
??1DirectoryIterator@Poco@@UAE@XZ
??0DirectoryIterator@Poco@@QAE@ABVFile@1@@Z
?exists@File@Poco@@QBE_NXZ
??1File@Poco@@UAE@XZ
??0Path@Poco@@QAE@PBD@Z

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

pocozip

??1ZipArchive@Zip@Poco@@QAE@XZ
?close@Compress@Zip@Poco@@QAE?AVZipArchive@23@XZ
?addRecursive@Compress@Zip@Poco@@QAEXABVPath@3@W4CompressionLevel@ZipCommon@23@_N0@Z
??0Compress@Zip@Poco@@QAE@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_N@Z
??1Compress@Zip@Poco@@QAE@XZ

Exports

Exports

_METAAPP_CompressFolder@8
_METAAPP_CopyPath@8
_METAAPP_PurgeEntriesInFolder@8
_METAAPP_RecursiveCreateFolder@4
_METAAPP_RecursiveRemove@4

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

51b88739fddec59fd0d012d8aa47c189

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcr90

pocofoundation

msvcp90

pocozip

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1.0MB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 3KB - Virtual size: 3KB

.text Size: 187KB - Virtual size: 188KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1.0MB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 187KB - Virtual size: 188KB