ac96d16fc4135b28ec1efd716177a5e117b913a60c6132a20c5e3e06e4310f3f_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ac96d16fc4135b28ec1efd716177a5e117b913a60c6132a20c5e3e06e4310f3f_NeikiAnalytics.exe
Size

400KB
MD5

2c4d439d8ff601bcf6ba24a3fc5a2c30
SHA1

6117764872cff420e560682b1a078e2b32b332f8
SHA256

ac96d16fc4135b28ec1efd716177a5e117b913a60c6132a20c5e3e06e4310f3f
SHA512

bc985a9ec9eec96b1e5740aeeca0dd2b9840f29a57e1510c451cbafd484291072f09fbde5b64a7c6c8441de8c468683f9be4736eee5d7931e6575a366abba8c8
SSDEEP

6144:3t266AR8HG6XzwdiL5bfpLECjVllx76r2xaP2KODdc20:9AdGmRx4CJTx76r2xaBOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac96d16fc4135b28ec1efd716177a5e117b913a60c6132a20c5e3e06e4310f3f_NeikiAnalytics.exe

Files

ac96d16fc4135b28ec1efd716177a5e117b913a60c6132a20c5e3e06e4310f3f_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

09fce2c0958259beb65890ef260df81f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

your_package_name.pdb

Imports

kernel32

GetNativeSystemInfo
VirtualQuery
VirtualFree
VirtualProtect
GetSystemInfo
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
HeapSize
GetStringTypeW
GetProcAddress
GetLastError
GetModuleHandleA
SetThreadStackGuarantee
SetStdHandle
GetConsoleOutputCP
WriteFile
GetCommandLineA
GetCPInfo
TlsGetValue
TlsSetValue
QueryPerformanceCounter
FlushFileBuffers
SetFileInformationByHandle
GetCurrentProcess
SetFilePointerEx
GetCurrentProcessId
ReadFile
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetStdHandle
GetConsoleMode
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
ReadConsoleW
SetLastError
SetHandleInformation
LCMapStringW
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
CloseHandle
ReleaseMutex
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
CreateMutexA
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateThread
GetCurrentThread
WaitForSingleObject
CreateWaitableTimerExW
SetWaitableTimer
Sleep
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetEnvironmentVariableW
GetCurrentDirectoryW
DeleteCriticalSection
GetFullPathNameW
GetModuleFileNameW
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
FormatMessageW
ExitProcess
FindNextFileW
FindClose
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
EncodePointer
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
RtlCaptureContext
GetCommandLineW
GetFileType
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
DecodePointer

ws2_32

listen
bind
freeaddrinfo
WSASocketW
WSAGetLastError
closesocket
getaddrinfo
WSACleanup
WSAStartup

api-ms-win-core-synch-l1-2-0

WakeByAddressAll
WaitOnAddress
WakeByAddressSingle

ntdll

NtReadFile
RtlNtStatusToDosError
NtWriteFile

Exports

Exports

DllMain
g2mchat_winmain
g2mcomm_winmain
g2mfeedback_winmain
g2mhost_winmain
g2minstaller_winmain
g2minsthigh_winmain
g2mlauncher_winmain
g2mmatchmaking_winmain
g2mmaterials_winmain
g2mpolling_winmain
g2mqanda_winmain
g2mrecorder_winmain
g2msessioncontrol_winmain
g2mstart_winmain
g2mtesting_winmain
g2mtranscoder_winmain
g2mui_winmain
g2muninstall_winmain
g2mvideoconference_winmain
g2mview_winmain

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09fce2c0958259beb65890ef260df81f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

api-ms-win-core-synch-l1-2-0

ntdll

Exports

Exports

Sections

.text Size: 222KB - Virtual size: 221KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 80KB - Virtual size: 82KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 222KB - Virtual size: 221KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 80KB - Virtual size: 82KB

.reloc
Size: 15KB - Virtual size: 14KB