259193ab59a5a78456f4a4c409d391856bf9121617f7a89c314eeb37f0c98a96_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

259193ab59a5a78456f4a4c409d391856bf9121617f7a89c314eeb37f0c98a96_NeikiAnalytics.exe
Size

44KB
MD5

627d936ba4cbbdf3aa03c2aa7bab1ce0
SHA1

c4e25dbd0b92b2fdce98c050a22bf09275d6314e
SHA256

259193ab59a5a78456f4a4c409d391856bf9121617f7a89c314eeb37f0c98a96
SHA512

9ba4eccf3437e0af0e2ada005802af927c4d54cca76dd0817ec585c9564fe40a39176566da7963b132c8dddbe246d5dc50784d1de17243caba805e97b0e1beca
SSDEEP

768:kKROcGJd4pGBzFU/T6yh1PtF63Fc7DYenlnolrvT/ypgm7dyun:NOcGIpG3cmyjPtHnolTT/CbRFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
259193ab59a5a78456f4a4c409d391856bf9121617f7a89c314eeb37f0c98a96_NeikiAnalytics.exe

Files

259193ab59a5a78456f4a4c409d391856bf9121617f7a89c314eeb37f0c98a96_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

769b8c7546350b72a39e5f4ef52f6f8e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_IntersectRectAndLine

python312

PyCapsule_New
PySequence_Check
PyObject_IsInstance
PyNumber_Index
PyDict_GetItemString
PyObject_CallObject
PyObject_HasAttrString
PyTuple_Type
_Py_NotImplementedStruct
PyNumber_AsSsize_t
PyExc_TypeError
PyCapsule_Type
PyCallable_Check
PyExc_IndexError
_Py_TrueStruct
PyDict_DelItemString
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyList_Append
PyExc_ValueError
PyErr_SetString
PyExc_AttributeError
PyFloat_FromDouble
PyDict_Size
PyDict_SetItemString
_Py_EllipsisObject
PyTuple_New
_Py_NoneStruct
PyExc_MemoryError
PySlice_Unpack
PyLong_FromLong
PyLong_FromSsize_t
PyErr_Occurred
PySequence_GetItem
PyImport_ImportModule
PySlice_Type
_Py_BuildValue_SizeT
PyBool_FromLong
PyErr_Clear
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyList_New
PyUnicode_FromFormat
PyObject_ClearWeakRefs
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyModule_AddObject
PyCapsule_GetPointer
PyDict_Next
_Py_Dealloc
PySlice_AdjustIndices
PySequence_Size
PyIndex_Check

kernel32

DisableThreadLibraryCalls
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

floor
ceil

Exports

Exports

PyInit_rect

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

769b8c7546350b72a39e5f4ef52f6f8e

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python312

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 4KB

.pdata Size: 2KB - Virtual size: 2KB

.gfids Size: 512B - Virtual size: 16B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 432B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 432B