5dc5361af91785fd995f26323e5b881844825c9f725bc3b2573d33dbad15935a_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5dc5361af91785fd995f26323e5b881844825c9f725bc3b2573d33dbad15935a_NeikiAnalytics.exe
Size

20KB
MD5

f52525a98dfdced4eb785a2a67c45d00
SHA1

e984359521660bbf3b31054363723beb7039a5e8
SHA256

5dc5361af91785fd995f26323e5b881844825c9f725bc3b2573d33dbad15935a
SHA512

a2ddf2b190f4c7da8ecba2ced76f1a96874b057d11c08bfd305028c34b64cb10732505c0376efd4eedfd903780bfbbf039c360697bd06192208c42334239d501
SSDEEP

384:keeeeeeeeeeeeeeeeeeeeXHvA71qqqvYvYvYP/9RRg78vYJP/3vLP/RghDPu3Ov7:keeeeeeeeeeeeeeeeeeeeXPieOOS/U6h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dc5361af91785fd995f26323e5b881844825c9f725bc3b2573d33dbad15935a_NeikiAnalytics.exe

Files

5dc5361af91785fd995f26323e5b881844825c9f725bc3b2573d33dbad15935a_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

352c7c0a12ddb4376363939f27727b51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\winevdm\Release\avifile.pdb

Imports

libwine

wine_ldt_copy

krnl386.exe16

ord174
ord149
ord173
ord144

avifil32

AVIStreamGetFrameClose
AVIFileCreateStreamA
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIStreamInfoA
AVIStreamSetFormat
AVIStreamWrite
AVIFileInit
AVIFileExit
AVIFileOpenA
AVIStreamOpenFromFileA
AVIStreamCreate
AVIBuildFilterA
AVISaveOptionsFree
AVIStreamStart
AVIStreamLength
AVIStreamTimeToSample
AVIStreamSampleToTime
AVIFileAddRef
AVIFileRelease
AVIFileInfoA
AVIFileGetStream
AVIFileWriteData
AVIFileReadData
AVIFileEndRecord
AVIStreamAddRef
AVIStreamRelease
AVIStreamFindSample
AVIStreamReadFormat
AVIStreamReadData
AVIStreamWriteData
AVIStreamRead

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapFree
HeapAlloc
GetProcessHeap
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_narrow_environment
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_onexit_table

Exports

Exports

_wine_spec_dos_header

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

352c7c0a12ddb4376363939f27727b51

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libwine

krnl386.exe16

avifil32

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

.rodata Size: 512B - Virtual size: 404B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 772B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.rodata
Size: 512B - Virtual size: 404B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 772B