5e66a703b5768d5c49f2c0999bfbf01726a878674b58b8100fe3475d06c07412_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5e66a703b5768d5c49f2c0999bfbf01726a878674b58b8100fe3475d06c07412_NeikiAnalytics.exe
Size

421KB
MD5

a81e13cf5020d9a0417c305a777aeb20
SHA1

8ba144e80e2cb6ae913abfc105624e7a746fbed6
SHA256

5e66a703b5768d5c49f2c0999bfbf01726a878674b58b8100fe3475d06c07412
SHA512

3bc63d07f0cd9b5fda1fc85773c5da8154b9b11b11331a1d9327c66e61d491d914640ad8e3b4415f093d82fb9f669385ff9279cfaff211f4df80627cb98f314e
SSDEEP

6144:uiSzlfnjtoXn+7jg68AxvLlh7vLoqK23k+ulXccQpE:ypfnjtob6HxXA723k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e66a703b5768d5c49f2c0999bfbf01726a878674b58b8100fe3475d06c07412_NeikiAnalytics.exe

Files

5e66a703b5768d5c49f2c0999bfbf01726a878674b58b8100fe3475d06c07412_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

7196f86a9dae8fdc36d24edbf41f4b0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
SystemFunction036

kernel32

WaitForSingleObjectEx
GetNumaNodeProcessorMask
WriteConsoleA
GetConsoleScreenBufferInfo
LoadLibraryA
RtlLookupFunctionEntry
DisableThreadLibraryCalls
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentDirectoryW
SetLastError
lstrlenW
GetLargePageMinimum
MultiByteToWideChar
CloseHandle
InitializeSListHead
WaitForSingleObject
IsDebuggerPresent
GetConsoleMode
GetStdHandle
FreeLibrary
GetProcAddress
VirtualQuery
VirtualFree
GetModuleHandleExW
GetLastError
FormatMessageW
VirtualAlloc
GetSystemInfo
GetCurrentProcessorNumber
GetCurrentProcess
GetProcessTimes
QueryPerformanceFrequency
QueryPerformanceCounter
FlsFree
FlsSetValue
FlsAlloc
WriteFile
GetEnvironmentVariableA
GetEnvironmentVariableW
GetModuleHandleW
GetCurrentProcessId
RtlVirtualUnwind
ReleaseMutex
GetNumaHighestNodeNumber
WriteConsoleW
CreateMutexA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WaitOnAddress
WakeByAddressAll

ntdll

NtWriteFile
RtlNtStatusToDosError

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memcpy
__CxxFrameHandler3
memset
memcmp
strstr
memmove
_CxxThrowException

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_errno
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm_e
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

fputs
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

napi_register_module_v1

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7196f86a9dae8fdc36d24edbf41f4b0c

Headers

DLL Characteristics

File Characteristics

Imports

bcryptprimitives

bcrypt

advapi32

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 310KB - Virtual size: 309KB

.rdata Size: 87KB - Virtual size: 87KB

.data Size: 7KB - Virtual size: 210KB

.pdata Size: 12KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 310KB - Virtual size: 309KB

.rdata
Size: 87KB - Virtual size: 87KB

.data
Size: 7KB - Virtual size: 210KB

.pdata
Size: 12KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 2KB