0d2aa7dc7827265ed6b16bb4e3413993d982da5faa066db50a649613bfbaaec5_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0d2aa7dc7827265ed6b16bb4e3413993d982da5faa066db50a649613bfbaaec5_NeikiAnalytics.exe
Size

61KB
MD5

eac4874693535cddbf19e15c4c89ae60
SHA1

3a10b69218fa62e3b2a89b2bd4d396b86fa267ec
SHA256

0d2aa7dc7827265ed6b16bb4e3413993d982da5faa066db50a649613bfbaaec5
SHA512

0954e95290ff0a4e1d0bae3e1503e3a9c955ccd8aff264c4281478257f7d84ac24d31cf939da22b7accb9d05581ef0cc4d7930c08169d4f1297c28ff6cb18e2a
SSDEEP

1536:UTlEiLtwztJr9lspeH6LYzVeEp/hM0YdROefSpkNdNakNFEqfDw9dli4uv6UkIIS:UVLtwztJrvspeHXYEp/hM0YcKN1LUo2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d2aa7dc7827265ed6b16bb4e3413993d982da5faa066db50a649613bfbaaec5_NeikiAnalytics.exe

Files

0d2aa7dc7827265ed6b16bb4e3413993d982da5faa066db50a649613bfbaaec5_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

f7931e539c86da4aa05a849c18bab225

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Alex\Documents\Visual Studio 2015\Projects\GBxCart_RW_COMLib\Release\GBxCart_RW_COMLib.pdb

Imports

kernel32

ReadFile
WriteFile
BuildCommDCBA
CreateFileA
CloseHandle
SetCommTimeouts
SetCommState
Sleep
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list
memcpy

api-ms-win-crt-stdio-l1-1-0

fread
fflush
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfscanf
__stdio_common_vsprintf
fwrite
fclose
fseek
fopen

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
strncat

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
strftime

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

RS232_CloseComport
RS232_OpenComport
check_if_file_exists
erase_ram
erase_rom
gb_specify_mbc_type
gb_specify_ram_size
gb_specify_rom_size
gba_specify_ram_size
gba_specify_rom_size
read_cartridge_mode
read_config
read_firmware_version
read_gb_header
read_gba_header
read_ram
read_rom
request_value
set_mode
update_config
update_current_folder
write_ram
write_rom

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7931e539c86da4aa05a849c18bab225

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB