3e5dda6ab4dfe484396d9ae71438156a54f8b7d223dc8277cb2688e8dfde92c4_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3e5dda6ab4dfe484396d9ae71438156a54f8b7d223dc8277cb2688e8dfde92c4_NeikiAnalytics.exe
Size

736KB
MD5

f931d363de2090b9aaf70101ae1bebc0
SHA1

efb22ed4cd1818fca2a8453c81ae9df5cf5073ab
SHA256

3e5dda6ab4dfe484396d9ae71438156a54f8b7d223dc8277cb2688e8dfde92c4
SHA512

de24c885d959f7ae5f0afebad49076d0c3db458da401a6cf53ef8f08e8b534459dff792b4d1b808e7535b06a220d325ef0e4e4adf50254a71053255e0fd75477
SSDEEP

12288:5ZpQvvBw3Cr60mRQNC/lkYWhLgZFkkBwYCGG6EEEEEEEEEEEEEEEEEEEEEEEEEEb:6vg4OlkFhLg/kkBq1MUJsv6tWKFdu9Ci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e5dda6ab4dfe484396d9ae71438156a54f8b7d223dc8277cb2688e8dfde92c4_NeikiAnalytics.exe

Files

3e5dda6ab4dfe484396d9ae71438156a54f8b7d223dc8277cb2688e8dfde92c4_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

a7ba9f72a1d9fa7f5ed1d30c0b1879ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr100

__setusermatherr
_commode
_fmode
__set_app_type
_unlock
__dllonexit
_lock
_configthreadlocale
_crt_debugger_hook
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_initterm_e
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
strerror
_getdrive
_wgetdcwd
_open_osfhandle
_fileno
_wchmod
_get_osfhandle
_waccess
fwrite
_write
fgets
fread
feof
_read
fclose
_close
_fseeki64
_errno
_clearfp
_control87
isdigit
isalpha
isupper
_gmtime64_s
_mktime64
getenv_s
strncpy
fflush
exit
strchr
_lseeki64
_ftelli64
_purecall
memchr
_tzset
isspace
rand_s
??_V@YAXPAX@Z
memmove
realloc
malloc
free
fprintf
__iob_func
??2@YAPAXI@Z
memset
memcpy
_onexit
??3@YAXPAX@Z

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryW
GetSystemDirectoryW
FindFirstFileExW
FindNextFileW
UnmapViewOfFile
CreateFileMappingW
GetSystemInfo
MapViewOfFile
SetEndOfFile
MoveFileExW
WriteFile
ReadFile
SetFilePointerEx
GetFileType
FlushFileBuffers
GetFileAttributesExW
GetLogicalDrives
GetCurrentDirectoryW
GetFullPathNameW
CreateFileW
DeviceIoControl
CloseHandle
DeleteFileW
MoveFileW
CopyFileW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindFirstFileW
FindClose
SetErrorMode
GetFileInformationByHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetProcAddress
GetSystemTime
GetLastError
FormatMessageW
LocalFree
GetVersionExW
GetUserDefaultLCID
CompareStringW
GetCommandLineW
GetSystemTimeAsFileTime

Exports

Exports

z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion

Sections

.text
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7ba9f72a1d9fa7f5ed1d30c0b1879ea

Headers

DLL Characteristics

File Characteristics

Imports

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 279KB - Virtual size: 278KB

.rdata Size: 434KB - Virtual size: 434KB

.data Size: 7KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 279KB - Virtual size: 278KB

.rdata
Size: 434KB - Virtual size: 434KB

.data
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 13KB - Virtual size: 12KB