9ba6d94811937e54401f89ffe989f9c9ba1020a80bbda26161915c367da8847a_NeikiAnalytics[.]exe

General

Target

9ba6d94811937e54401f89ffe989f9c9ba1020a80bbda26161915c367da8847a_NeikiAnalytics.exe
Size

9KB
MD5

0162a9e99732157ab85381f502fd73b0
SHA1

301b4f17744fadf2bbbf73068ee26b908bfc1d88
SHA256

9ba6d94811937e54401f89ffe989f9c9ba1020a80bbda26161915c367da8847a
SHA512

8bc69ec2a8ab295073f1bb05be013b1db71d17fe5942a8dd0416e1b246af4e6fc92a3585279b981ba65d90f6bf8a93b63909feef536237ef228ff009e0387983
SSDEEP

192:yiTFs2hpBueLPajEL5kYlWJzpjOe6PQMVnCI:yEthxLNwJ1j/6Pbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ba6d94811937e54401f89ffe989f9c9ba1020a80bbda26161915c367da8847a_NeikiAnalytics.exe

Files

9ba6d94811937e54401f89ffe989f9c9ba1020a80bbda26161915c367da8847a_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

6d8f3e86b34b7516364a7d1620c8dfa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python39

_Py_Dealloc
PyByteArray_Type
_PyByteArray_empty_string
PyExc_TypeError
PyBytes_FromStringAndSize
PyMemoryView_Type
PyModule_Create2
PyMemoryView_GetContiguous
PyType_IsSubtype
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyExc_ValueError
PyErr_SetString

kernel32

InitializeSListHead
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit_speedups

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d8f3e86b34b7516364a7d1620c8dfa4

Headers

DLL Characteristics

File Characteristics

Imports

python39

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1004B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 380B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1004B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 380B