aa1654524c30ca58064e325a4d6d1acae711c311cbd08421974242637fdaed35_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

aa1654524c30ca58064e325a4d6d1acae711c311cbd08421974242637fdaed35_NeikiAnalytics.exe
Size

14KB
MD5

a9d03d6b5bdc4548b803ea7a11df49b0
SHA1

9ae50423fcedd2524d946ee3eeccab41c8215ea3
SHA256

aa1654524c30ca58064e325a4d6d1acae711c311cbd08421974242637fdaed35
SHA512

76b14710da3555506e8ff183c997214a1f486bffc8d75a744541850168e774b60497ab5a338c7baabc2fa1b491cc686c14a2d10f8c85a12734b280872849af59
SSDEEP

192:sF5GGrDcABt5f43igCIUloBMTYo+woJ1e+VOjn8G5JUnLWYJina9J3UkQS:s/GGrhDcao2Te3w8t9JiC3UR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1654524c30ca58064e325a4d6d1acae711c311cbd08421974242637fdaed35_NeikiAnalytics.exe

Files

aa1654524c30ca58064e325a4d6d1acae711c311cbd08421974242637fdaed35_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

abb3c013a67045e18dfa7c92a231f0b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\winevdm\Release\win87em.pdb

Imports

krnl386.exe16

ord58
krnl386_get_config_string
DOSVM_GetPMHandler16
DOSVM_SetPMHandler16
ord23
ord36
ord113
ord155
DOSVM_SetBuiltinVector

libwine

wine_dbg_log
wine_ldt_copy

kernel32

GetSystemTimeAsFileTime
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_cexit
_seh_filter_dll
_initterm_e
_initialize_narrow_environment
_initterm

Exports

Exports

_wine_spec_dos_header

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abb3c013a67045e18dfa7c92a231f0b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

krnl386.exe16

libwine

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 1KB

.rodata Size: 512B - Virtual size: 24B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 776B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 1KB

.rodata
Size: 512B - Virtual size: 24B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 776B