5e7ad6352e3e589512b827785d45f6e2b236b08fce94b83d95b4f5a1650aa321_NeikiAnalytics[.]exe

General

Target

5e7ad6352e3e589512b827785d45f6e2b236b08fce94b83d95b4f5a1650aa321_NeikiAnalytics.exe
Size

23KB
MD5

883a0cda6c4fa788582e03a504286b10
SHA1

db2bd1c76c1308b5a20d72d089faa2e24711f1bc
SHA256

5e7ad6352e3e589512b827785d45f6e2b236b08fce94b83d95b4f5a1650aa321
SHA512

1b1376de74351dee7bbf347a58a5e0783ef13c93d1b450c30d6d45544ccf08b136f562650e8ca202c45603e038d47541589a4331b6aeab91d04af02406400e27
SSDEEP

384:bVmKXqKvJEh8gb43xsdPtQTuO1tgTZkzFS1895xdQdl6bQqnbGOfD/IkMiBLzN:bJvuh8gv/ALjQyFSs5LIlDSD/IkHzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e7ad6352e3e589512b827785d45f6e2b236b08fce94b83d95b4f5a1650aa321_NeikiAnalytics.exe

Files

5e7ad6352e3e589512b827785d45f6e2b236b08fce94b83d95b4f5a1650aa321_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

90574e4218b3627862e7a1b7723bda66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-runtime-l1-1-0

_wassert
_initterm
_initterm_e
_seh_filter_dll
terminate
_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

kernel32

LoadLibraryExW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetLastError
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
InterlockedFlushSList
RtlUnwind

api-ms-win-crt-string-l1-1-0

wcsncmp

Exports

Exports

PyInit__keccak
keccak_absorb
keccak_copy
keccak_destroy
keccak_digest
keccak_init
keccak_squeeze

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90574e4218b3627862e7a1b7723bda66

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 868B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 868B