9fb5fd262da27a0b7aa999ca107901a7a67ee45d2a70e08d62c3e324e2354af0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9fb5fd262da27a0b7aa999ca107901a7a67ee45d2a70e08d62c3e324e2354af0_NeikiAnalytics.exe
Size

488KB
MD5

4293a85a3b18b89ad761949e9bf25cf0
SHA1

3b73568d38d32fea9de44b4d5244214d52d0ee11
SHA256

9fb5fd262da27a0b7aa999ca107901a7a67ee45d2a70e08d62c3e324e2354af0
SHA512

718e51c5f202f2079026523cc7eddfd314808631074fcd54c400f315aaa2d81a928f0bd345e133cdb4486e0ebab5b11547ba66b939f1fcad8e5a82fb4bb5d7b3
SSDEEP

6144:kur3eE+sP1o7O8ezGwAWCSdG3Qn6tnYatnyWshdy42C60Jqvg9eTD0Hq+2/7:kur3johIldG3k8nVMhCkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fb5fd262da27a0b7aa999ca107901a7a67ee45d2a70e08d62c3e324e2354af0_NeikiAnalytics.exe

Files

9fb5fd262da27a0b7aa999ca107901a7a67ee45d2a70e08d62c3e324e2354af0_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

ed30577820b1534158591b1338772c3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memset
memcpy
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm
_initialize_narrow_environment

Exports

Exports

j2d_mlib_ImageAffine
j2d_mlib_ImageConvKernelConvert
j2d_mlib_ImageConvMxN
j2d_mlib_ImageCreate
j2d_mlib_ImageCreateStruct
j2d_mlib_ImageDelete
j2d_mlib_ImageLookUp

Sections

.text
Size: 421KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed30577820b1534158591b1338772c3c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 421KB - Virtual size: 420KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 176B

.text
Size: 421KB - Virtual size: 420KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 176B