116be44f57b16095315f2a1abe2cbd86c6cb7008fe27968c57004e95607f3454_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

116be44f57b16095315f2a1abe2cbd86c6cb7008fe27968c57004e95607f3454_NeikiAnalytics.exe
Size

1.7MB
MD5

7be263aa2f438495ba8475255a1f6da0
SHA1

69c406dc81744e0a1967ad9cc72b03aefa1b7782
SHA256

116be44f57b16095315f2a1abe2cbd86c6cb7008fe27968c57004e95607f3454
SHA512

886438e7c046b759fa9e1c7c5ec85aa511ca0758db985b92d414d3fdae65a96ce705383489aa11b1ee1850e1d053b424f58c78df34f30db4fa70e89df227cf00
SSDEEP

24576:OvyUabUcBdPN0NCnGLtaoxZk1oWfgJj2ODaHVPy+zFh0lhSMXl62DjHeczJEBfLf:OqJAhMoxZOoWoJj28QQoclNJEBfF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116be44f57b16095315f2a1abe2cbd86c6cb7008fe27968c57004e95607f3454_NeikiAnalytics.exe

Files

116be44f57b16095315f2a1abe2cbd86c6cb7008fe27968c57004e95607f3454_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

a143e60a69be37967628d610bb31997c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Project Bo4\SOURCE CODE\bods-shield\bods-shield\build\bin\x64\Release\d3d11.pdb

Imports

kernel32

GetConsoleCursorInfo
SetConsoleCursorInfo
GetConsoleWindow
ReadConsoleInputA
AllocConsole
AttachConsole
GetCurrentProcessId
SetConsoleTitleA
CreateEventA
SetEvent
OutputDebugStringA
GetVolumeInformationA
CreateMutexA
GetLastError
CloseHandle
GetTickCount
GetSystemDirectoryA
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
RtlCaptureStackBackTrace
IsBadReadPtr
GetCurrentThreadId
SetConsoleCursorPosition
SetThreadContext
GetThreadContext
HeapDestroy
HeapCreate
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetSystemInfo
InitializeCriticalSection
GetProcAddress
CreateMutexExA
GetStdHandle
WriteConsoleW
SetEndOfFile
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetConsoleScreenBufferInfo
RtlUnwind
CreateThread
GetCurrentProcess
SetUnhandledExceptionFilter
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
HeapReAlloc
GetFileType
HeapAlloc
HeapFree
VirtualProtect
VirtualFree
VirtualAlloc
FlushInstructionCache
GlobalLock
GlobalUnlock
GetModuleFileNameA
SizeofResource
FindResourceA
GetModuleHandleA
GetCommandLineA
GetModuleHandleExA
LoadLibraryA
LockResource
LoadResource
FreeLibrary
Thread32Next
Thread32First
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetThreadId
OpenThread
ReadFile
SetFilePointer
GetTempPathA
CreateFileA
GetTempFileNameA
FlushFileBuffers
VirtualQuery
DeleteFileA
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
MultiByteToWideChar
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
Sleep
GetExitCodeThread
GetNativeSystemInfo
FormatMessageA
LocalFree
GetLocaleInfoEx
InitOnceBeginInitialize
InitOnceComplete
SetLastError
LoadLibraryExW
GetSystemTimeAsFileTime
EncodePointer
WakeAllConditionVariable
SleepConditionVariableSRW
LCMapStringEx
GetCPInfo
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
TerminateProcess

user32

MessageBoxA
ShowWindow
MsgWaitForMultipleObjects
GetWindowTextA
ShowCursor
GetWindowTextW
PeekMessageA
UnregisterClassA
PostQuitMessage
DispatchMessageW
PeekMessageW
UpdateWindow
SetWindowPos
AdjustWindowRect
GetWindowRect
SendMessageA
CreateWindowExA
GetSystemMetrics
RegisterClassA
GetClipboardData
CloseClipboard
OpenClipboard
LoadCursorA
LoadIconA
DefWindowProcA
DestroyWindow
IsWindow
GetAsyncKeyState
DispatchMessageA
TranslateMessage

gdi32

CreateBitmap
DeleteObject

advapi32

CryptAcquireContextW
RegOpenKeyExW
RegCloseKey
GetUserNameA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA

shell32

ShellExecuteA

ws2_32

htons
getaddrinfo
freeaddrinfo
gethostbyname
inet_pton

dbghelp

MiniDumpWriteDump

Exports

Exports

CallNtPowerInformation

Sections

.text
Size: 845KB - Virtual size: 845KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a143e60a69be37967628d610bb31997c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ws2_32

dbghelp

Exports

Exports

Sections

.text Size: 845KB - Virtual size: 845KB

.rdata Size: 561KB - Virtual size: 560KB

.data Size: 18KB - Virtual size: 90KB

.pdata Size: 30KB - Virtual size: 30KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 248KB - Virtual size: 248KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 845KB - Virtual size: 845KB

.rdata
Size: 561KB - Virtual size: 560KB

.data
Size: 18KB - Virtual size: 90KB

.pdata
Size: 30KB - Virtual size: 30KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 248KB - Virtual size: 248KB

.reloc
Size: 5KB - Virtual size: 5KB