362475a58b1c007ef9d778f2e15eb02498811c64bafe6aca3fa3b5328da82b8f_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

362475a58b1c007ef9d778f2e15eb02498811c64bafe6aca3fa3b5328da82b8f_NeikiAnalytics.exe
Size

38KB
MD5

4f58db3142005b66e5008c6fcf6bc5e0
SHA1

5549d782117692450521cfc2fbc7b3524073e3a4
SHA256

362475a58b1c007ef9d778f2e15eb02498811c64bafe6aca3fa3b5328da82b8f
SHA512

3367e9db31de2d8e1eb1793d5e58201307f7cf12351e37a24199c4d51a3aacf240fc64b5750ce08c93506c1e836fe46ffcefd365d11d55f17b380ba2a0827279
SSDEEP

768:wlH7ACL0KeoSexQBMJTTbjqwIjWuAvG0+:wlH7luoSeDTfZv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
362475a58b1c007ef9d778f2e15eb02498811c64bafe6aca3fa3b5328da82b8f_NeikiAnalytics.exe

Files

362475a58b1c007ef9d778f2e15eb02498811c64bafe6aca3fa3b5328da82b8f_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

8bf6949985bb3b4954df0bd29b4f9de8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

uil

ioctl

supercso

?addBool@ConfigManager@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PA_N0@Z
?addU32@ConfigManager@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAIII0@Z
?registerConfigData@ConfigManager@@QAEHPAXI@Z
?checkInterface@DriveThread@@QBEHH@Z
?mapCmdStatusQueue@DriveThread@@QAEPAVCmdStatusQueue@@PBDKPAH@Z
?mapCircularBuffer@DriveThread@@QAEPAV?$circular_buffer@UReplayData@@V?$allocator@UReplayData@@@std@@@boost@@PBDKPAH@Z
?mapTaggedBuffer@DriveThread@@QAEPAVTaggedBuffer@@PBDKPAH@Z
?mapU32@DriveThread@@QAEPAKPBDKPAHK@Z
?registerDriveData@DriveThread@@QAEHPAX@Z
?unlock@TaggedBuffer@@QAEHK@Z
?getData@TaggedBuffer@@QBEPAXKPAI@Z
?pushFreeTag@FreeTagQueue@@QAEHII@Z
?getNotFreeTag@FreeTagQueue@@QAEII_N@Z

kernel32

TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
GetProcessHeap
ResetEvent
CreateEventA
CloseHandle
SetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
OpenEventA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
FormatMessageA
GetLastError

msvcp120

?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr120

_CxxThrowException
__CxxFrameHandler3
memcpy
memset
strerror
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_except1
??1type_info@@UAE@XZ
__CppXcptFilter
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
?what@exception@std@@UBEPBDXZ
calloc
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABQBD@Z
memmove
_amsg_exit
free
??1exception@std@@UAE@XZ

Exports

Exports

initAgent

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8bf6949985bb3b4954df0bd29b4f9de8

Headers

DLL Characteristics

File Characteristics

Imports

uil

supercso

kernel32

msvcp120

msvcr120

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 2KB