99f5f50bd82bcd52741195852bc2abacdaa444e7499a6d1bce01a5caaa04bb71_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

99f5f50bd82bcd52741195852bc2abacdaa444e7499a6d1bce01a5caaa04bb71_NeikiAnalytics.exe
Size

27KB
MD5

2bc5ff52b3e6a6a35300a2b44756f470
SHA1

bf6b79e8361e90d7a4eb210098cd94dd0fb80bf7
SHA256

99f5f50bd82bcd52741195852bc2abacdaa444e7499a6d1bce01a5caaa04bb71
SHA512

694782e57f4ca0ee7e87691a0b83de9ec9837a2d1a2b77331fa1ee259de4c5fb1447e9147b2d266ef0e811d4387920e03707692d541414965c56f71e95847d27
SSDEEP

192:M7L99n9tKizdSyrFUP+OM43sqU77vPWYjOzNlrI0zaIM6:M7LJzdS1+asBX3jMNlr/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99f5f50bd82bcd52741195852bc2abacdaa444e7499a6d1bce01a5caaa04bb71_NeikiAnalytics.exe

Files

99f5f50bd82bcd52741195852bc2abacdaa444e7499a6d1bce01a5caaa04bb71_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

1eeeb978dddb267cdace03fe4b4f3cc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\lmms\lmms\build\plugins\ladspa\decay_1886.pdb

Imports

vcruntime140

__current_exception_context
__current_exception
memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc

api-ms-win-crt-math-l1-1-0

_libm_sse2_exp_precise

api-ms-win-crt-runtime-l1-1-0

terminate
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
_register_onexit_function
_cexit
_initialize_onexit_table
_crt_atexit
_crt_at_quick_exit

kernel32

GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

ladspa_descriptor

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1eeeb978dddb267cdace03fe4b4f3cc8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 904B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 904B