b9434b11a0a8fef74468fe3fe4b682c46355959468e4ac3b4c9a172d26526323_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

b9434b11a0a8fef74468fe3fe4b682c46355959468e4ac3b4c9a172d26526323_NeikiAnalytics.exe
Size

75KB
MD5

85e59f1bd7b8ca787448db3ef9775fc0
SHA1

048e528171f20660432ea981d5828b0ce996572f
SHA256

b9434b11a0a8fef74468fe3fe4b682c46355959468e4ac3b4c9a172d26526323
SHA512

fe1c8376afd5c94a4949c4f13f34d337495156b363c6b28223173641efdf52bb39c1891f35caad43a89744cdcc3045b9a7311369cc49aa3f24c0b73ba45a54b7
SSDEEP

1536:ST/vYl/rGAuxevZfUpx0afR/DH6YDYBrrk5Bn:uXCGAuqfIx/fJDHhcBrrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9434b11a0a8fef74468fe3fe4b682c46355959468e4ac3b4c9a172d26526323_NeikiAnalytics.exe

Files

b9434b11a0a8fef74468fe3fe4b682c46355959468e4ac3b4c9a172d26526323_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

991a20f17bc4075e72a041533a8eafc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python310

PyTuple_New
PySequence_Contains
PyDict_SetItemString
PyDict_Size
PyFrame_Type
PyExc_AttributeError
PyErr_SetString
PyErr_WriteUnraisable
PyObject_GetIter
PyErr_WarnFormat
PyEval_EvalCodeEx
PyIter_Send
PyExc_ValueError
PyDict_Next
PyErr_Format
PyExc_ArithmeticError
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyCoro_Type
PyFloat_Type
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyExc_OverflowError
_Py_Dealloc
PyImport_GetModuleDict
PyModule_GetDict
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyModule_AddObject
PyObject_GC_Del
PyObject_CallFunctionObjArgs
PyDescr_IsData
PyObject_ClearWeakRefs
PyObject_Init
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyObject_GC_IsFinalized
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyBytes_Type
PyObject_GC_UnTrack
PyWrapperDescr_Type
PyCode_New
PyCapsule_New
PyCapsule_GetName
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyNumber_Index
PyExc_StopIteration
PyCMethod_New
_PyGen_SetStopIterationValue
PyList_Type
PyDict_GetItemString
PyObject_GetItem
PyObject_CallObject
PyModuleDef_Init
PyBytes_FromStringAndSize
PyUnicode_Compare
PyExc_StopAsyncIteration
PyObject_IsSubclass
PyExc_TypeError
PyMem_Realloc
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyByteArray_empty_string
PyMem_Malloc
PyExc_IndexError
Py_EnterRecursiveCall
PyExc_ImportError
PyGen_Type
_Py_TrueStruct
PyArg_UnpackTuple
PyExc_SystemError
_PyObject_GC_New
PyAsyncGen_Type
PyTraceBack_Type
PyMethodDescr_Type
PyExc_GeneratorExit
PyEval_EvalFrameEx
PyUnicode_FromString
_PyType_Lookup
PyObject_Size
PyObject_Call
PyByteArray_Type
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyLong_FromLong
PyObject_SetAttrString
PyExc_IOError
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyTraceBack_Here
PyObject_GenericGetAttr
PyList_Sort
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyObject_SelfIter
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyImport_ImportModule
Py_LeaveRecursiveCall
PyExc_DeprecationWarning
PyLong_AsSsize_t
PyFrame_New
PyFunction_Type
PyErr_PrintEx
PyCapsule_IsValid
PyExc_RuntimeWarning
PyErr_WarnEx
_PyObject_CallFunction_SizeT
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
_Py_NoneStruct
PyObject_SetAttr
PyBytes_AsStringAndSize
PyBaseObject_Type
PyRun_StringFlags
PyLong_AsUnsignedLongLong
PyModule_GetName
PyObject_GetAttr
Py_GetVersion
PyLong_FromUnsignedLongLong
PyInterpreterState_GetID
PyExc_MemoryError
PyErr_SetNone
PyObject_GC_Track
PyObject_Hash
PyUnicode_Decode
PySequence_List

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strchr
__C_specific_handler
__std_exception_copy
__std_type_info_destroy_list
memset
memmove
_CxxThrowException
__std_exception_destroy
memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

Exports

Exports

PyInit_strings

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

991a20f17bc4075e72a041533a8eafc4

Headers

DLL Characteristics

File Characteristics

Imports

python310

msvcp140

kernel32

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 7KB - Virtual size: 10KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 520B

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 7KB - Virtual size: 10KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 520B