6936d32fef9235287d0c257922f1c95c1d1f2391de5fc71016818894c1c05fca_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

6936d32fef9235287d0c257922f1c95c1d1f2391de5fc71016818894c1c05fca_NeikiAnalytics.exe
Size

160KB
MD5

c5c1216250bd9fa9bcb04ece500789f0
SHA1

683996f8da3ec21f762a189017df9c7bba8967ee
SHA256

6936d32fef9235287d0c257922f1c95c1d1f2391de5fc71016818894c1c05fca
SHA512

1dc57138993d342496795735e9f0abbb29d6db5807f8be06224c5d788c6725ecd2dd99e0e40e2eb1557c3db37b3101cb43ef9edb352b619e84338ae750114bfa
SSDEEP

3072:UBOH6Aomw6ikthfU6cynqZ6eHd1rgz3b75RZCEdOmoc92eMOAfcftG:UAfrw6DzsBynqp5EPaOAfKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6936d32fef9235287d0c257922f1c95c1d1f2391de5fc71016818894c1c05fca_NeikiAnalytics.exe

Files

6936d32fef9235287d0c257922f1c95c1d1f2391de5fc71016818894c1c05fca_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

9c05066eb332ffab00c012f7615fb634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

w:\laetus\Release\Laetus.pdb

Imports

kernel32

GetLastError
LoadLibraryW
FreeLibrary
GetCurrentThreadId
GetSystemTimeAsFileTime
CreateFileA
DeviceIoControl
QueryDosDeviceA
WaitForSingleObject
Sleep
InterlockedExchange
MultiByteToWideChar
CreateEventW
InterlockedCompareExchange
CloseHandle
GetProcAddress
SetEvent
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId

user32

MessageBoxW

advapi32

RegEnumKeyExW
RegOpenCurrentUser
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegFlushKey
RegCloseKey
RegEnumValueW

msvcp80

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

msvcr80

??2@YAPAXI@Z
wcscpy_s
??1exception@std@@UAE@XZ
swprintf_s
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
malloc
__CxxFrameHandler3
_wcsicmp
wcsstr
wcsncpy_s
_invalid_parameter_noinfo
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
exit
??3@YAXPAX@Z
wcscat_s
sscanf_s
??0exception@std@@QAE@ABV01@@Z
memset
_time64
_CxxThrowException

Exports

Exports

_ExternalFunction@12

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c05066eb332ffab00c012f7615fb634

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 8KB