8c1dc07b1a8b19ecdc70fdd319c00347dfebfc7290192522a56839b67f03dcf5_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8c1dc07b1a8b19ecdc70fdd319c00347dfebfc7290192522a56839b67f03dcf5_NeikiAnalytics.exe
Size

882KB
MD5

6d052a6a300266277a5b11fff0b8a430
SHA1

bbe6af0206f200dee240cff1f5c01fe7dc0867b9
SHA256

8c1dc07b1a8b19ecdc70fdd319c00347dfebfc7290192522a56839b67f03dcf5
SHA512

9c52a552875abe859f8ac051c24089323b85f08f9fd6c431f440cf95cc2ee9c67ff944c74f020f6eade41885c17546040c334aab76bcf1f8e96b49589bbaa7fc
SSDEEP

12288:W5kBJQ+xFDxIGVYykGaNAcfF4X8Jk/JdMCIPE9Pw6LYY/GvLnm:fLQKFDxkVfukk/JWC6EO6L2Ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c1dc07b1a8b19ecdc70fdd319c00347dfebfc7290192522a56839b67f03dcf5_NeikiAnalytics.exe

Files

8c1dc07b1a8b19ecdc70fdd319c00347dfebfc7290192522a56839b67f03dcf5_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

98727d87b5a42adbe644e6cde1d9677e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

AdjustTokenPrivileges
CloseServiceHandle
ControlService
DeleteService
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
OpenServiceA
QueryServiceStatus
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
DeleteFileW
DeviceIoControl
DosDateTimeToFileTime
ExitProcess
ExpandEnvironmentStringsA
FileTimeToDosDateTime
FindClose
FindFirstFileA
FindNextFileA
FlushConsoleInputBuffer
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetComputerNameA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempPathA
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MoveFileA
MoveFileExA
MultiByteToWideChar
OpenProcess
PeekConsoleInputA
RaiseException
ReadConsoleInputA
ReadFile
ReadProcessMemory
ReleaseMutex
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleInputA
WriteFile
WritePrivateProfileStringA

user32

EnumThreadWindows
ExitWindowsEx
MessageBoxA
SendMessageA
wsprintfA

Exports

Exports

InoAvCloseSigEnum
InoAvCreateThreadContext
InoAvDeInit
InoAvDestroyThreadContext
InoAvEnableFeature
InoAvEnableFeatureEx
InoAvExecSystemCure
InoAvFindSigEntry
InoAvGetCallback
InoAvGetEngineInfo
InoAvGetSignatureInfo
InoAvInit
InoAvOpenSigEnum
InoAvQueryFeature
InoAvQueryFeatureEx
InoAvScanBoot
InoAvScanFile
InoAvScanMemory
InoAvSetCallback
InoAvSetDataFileName
InoAvSetScanMode
InoAvSigEnum
InoAvpackDat
_DllAvCheckCriticalAreas
_DllAvCheckCriticalAreasHandle
_DllAvCheckIntegrity
_DllAvCleanDirectoryExcess
_DllAvCleanFileExcess
_DllAvCreateCriticalAreaFile
_DllAvCreateCriticalAreaHandle
_DllAvDeleteBoot
_DllAvDllEnableDisableMessages
_DllAvDllGetCylinder
_DllAvDllGetExtraLParam
_DllAvDllGetFileName
_DllAvDllGetHead
_DllAvDllGetPathName
_DllAvDllGetRealDrive
_DllAvDllGetVirusName
_DllAvDllSetWindowHandle
_DllAvDupAvBuffer
_DllAvFindFirstVirusName
_DllAvFindNextVirusName
_DllAvFindPrevVirusName
_DllAvFreeDupAvBuffer
_DllAvGetDatVersion
_DllAvGetDataFileName
_DllAvGetEngineVersions
_DllAvGetFileName
_DllAvGetFullErrorCode
_DllAvGetLocVirusName
_DllAvGetMemoryUsed
_DllAvGetSomeVirusNameInfo
_DllAvGetTotals
_DllAvGetUIBuffer
_DllAvGetVirusFlags
_DllAvGetVirusLocation
_DllAvGetVirusName
_DllAvGetVirusNameInfo
_DllAvInitialize
_DllAvLoadData
_DllAvMakeText
_DllAvNewDrive
_DllAvPrintInDll
_DllAvPutInCriticalAreaFile
_DllAvPutInCriticalAreaHandle
_DllAvResetTotals
_DllAvRestoreCriticalAreas
_DllAvRestoreCriticalAreasHandle
_DllAvScanBoot
_DllAvScanDirectory
_DllAvScanDirectoryFirst
_DllAvScanDirectoryNext
_DllAvScanFile
_DllAvScanMemory
_DllAvScanSectors
_DllAvSetDataFileName
_DllAvSetFlags
_DllAvSetUIBuffer
_DllAvTerminate
_DllAvUnloadData
___CPPdebugHook

Sections

.text
Size: 762KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.casec
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

98727d87b5a42adbe644e6cde1d9677e

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Exports

Exports

Sections

.text Size: 762KB - Virtual size: 764KB

.data Size: 95KB - Virtual size: 108KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 2KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 14KB - Virtual size: 16KB

.casec Size: 512B - Virtual size:

.text
Size: 762KB - Virtual size: 764KB

.data
Size: 95KB - Virtual size: 108KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 14KB - Virtual size: 16KB

.casec
Size: 512B - Virtual size: