4479fcd57ff221c7f2d6051e625866057e9c277d6c7f22ef7e10fc005084fc11_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4479fcd57ff221c7f2d6051e625866057e9c277d6c7f22ef7e10fc005084fc11_NeikiAnalytics.exe
Size

186KB
MD5

69e4e2d5654dc63482583bb9bdaf16b0
SHA1

c2268266ed99cdcc61f1c3b42a646136a4ac1036
SHA256

4479fcd57ff221c7f2d6051e625866057e9c277d6c7f22ef7e10fc005084fc11
SHA512

78f4e957bcb28855a76be37aad4c1cd1019f87a47fd414148e7006cc141020c044cb15dbee7c7cbf5d94e304a8a443ebe98332a85a58d12deb1af49f806c4214
SSDEEP

3072:s0jbtcUQXtKyIzkXqaOt6RBMsBro4kfsn9HcRAAGBce/6rIalwwnwseEg7mPyuWt:s0jbCT9RIzyfOURKsBro4kfsn9HYAAc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4479fcd57ff221c7f2d6051e625866057e9c277d6c7f22ef7e10fc005084fc11_NeikiAnalytics.exe

Files

4479fcd57ff221c7f2d6051e625866057e9c277d6c7f22ef7e10fc005084fc11_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

8b174c7a45dedd259e60aaa244baa9fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python311

PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyNumber_Subtract
PyErr_Restore
PyExc_OverflowError
_Py_Dealloc
PyImport_GetModuleDict
PyModule_GetDict
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyModule_AddObject
PyErr_Fetch
PyLong_AsLong
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyObject_GetAttrString
PyErr_Clear
PyUnicode_Decode
PyException_SetTraceback
PyCapsule_New
PyDict_SetItem
PyDict_New
_PyDict_GetItem_KnownHash
PyList_Type
PyLong_FromLongLong
PyObject_GetItem
PyModuleDef_Init
PyBytes_FromStringAndSize
PyNumber_Long
PyErr_SetExcInfo
PyExc_TypeError
PyMem_Realloc
PyCapsule_Type
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
Py_EnterRecursiveCall
PyFloat_Type
_Py_TrueStruct
PyExc_SystemError
_PyUnicode_FastCopyCharacters
PyErr_GetExcInfo
_PyType_Lookup
PyObject_Call
PyNumber_InPlaceSubtract
PyEval_RestoreThread
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyDict_SetItemString
PyLong_FromString
PyTuple_New
PyLong_AsLongLong
_Py_NoneStruct
PyLong_AsUnsignedLongLong
PyObject_GetAttr
Py_GetVersion
PyLong_FromUnsignedLongLong
PyInterpreterState_GetID
PyObject_Hash
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyEval_SaveThread
PyTraceBack_Here
PyLong_FromSsize_t
PyErr_Occurred
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyImport_ImportModule
Py_LeaveRecursiveCall
PyExc_DeprecationWarning
PyFrame_New
PyErr_WarnEx
PyLong_AsUnsignedLong
PyCode_NewEmpty
PyErr_SetObject
PyExc_Exception
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
_Py_FalseStruct
PyTuple_Type
PyObject_SetAttr
PyObject_RichCompare
PyErr_Format
PyLong_FromUnsignedLong
PyExc_ValueError
PyErr_WarnFormat
PyErr_SetString
PyUnicode_New
PyExc_AttributeError
PyExc_ImportError
PyFloat_FromDouble
PyDict_GetItemString
PyBaseObject_Type

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-math-l1-1-0

log1p
log1pf
_CIfmod
_libm_sse2_acos_precise
_libm_sse2_cos_precise
expm1
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sqrt_precise
ceil
floor
_libm_sse2_exp_precise

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit

Exports

Exports

PyInit__bounded_integers
random_beta
random_binomial
random_bounded_bool_fill
random_bounded_uint16_fill
random_bounded_uint32_fill
random_bounded_uint64
random_bounded_uint64_fill
random_bounded_uint8_fill
random_buffered_bounded_bool
random_buffered_bounded_uint16
random_buffered_bounded_uint32
random_buffered_bounded_uint8
random_chisquare
random_exponential
random_f
random_gamma
random_gamma_f
random_geometric
random_geometric_search
random_gumbel
random_interval
random_laplace
random_logistic
random_lognormal
random_logseries
random_multinomial
random_negative_binomial
random_noncentral_chisquare
random_noncentral_f
random_normal
random_pareto
random_poisson
random_positive_int
random_positive_int32
random_positive_int64
random_power
random_rayleigh
random_standard_cauchy
random_standard_exponential
random_standard_exponential_f
random_standard_exponential_fill
random_standard_exponential_fill_f
random_standard_exponential_inv_fill
random_standard_exponential_inv_fill_f
random_standard_gamma
random_standard_gamma_f
random_standard_normal
random_standard_normal_f
random_standard_normal_fill
random_standard_normal_fill_f
random_standard_t
random_standard_uniform
random_standard_uniform_f
random_standard_uniform_fill
random_standard_uniform_fill_f
random_triangular
random_uint
random_uniform
random_vonmises
random_wald
random_weibull
random_zipf

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b174c7a45dedd259e60aaa244baa9fd

Headers

DLL Characteristics

File Characteristics

Imports

python311

kernel32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 11KB - Virtual size: 10KB