44383486dc974da20af81e13f5dffbb3ad5e72fa6e89784ab710bc2c9f57e4c4_NeikiAnalytics[.]exe

General

Target

44383486dc974da20af81e13f5dffbb3ad5e72fa6e89784ab710bc2c9f57e4c4_NeikiAnalytics.exe
Size

254KB
MD5

6b2e8703a9fd005a3601f1e23cebf0f0
SHA1

35e5767de28265c12beb3a5d5acbd5ebbeeff3c9
SHA256

44383486dc974da20af81e13f5dffbb3ad5e72fa6e89784ab710bc2c9f57e4c4
SHA512

552c002e3e2a01ac4990e3e145efc3fc7d84f6f7b7777646bcf24780a644ae122e799dba5456d88cf73b9bc00585be9b51e39b0306b289031404e1ffc9080c0f
SSDEEP

6144:6hFNCaPZ7fRc0rgWxxnjBY31tTeZS+n5EXsvTraoiq/dqj8:eC23r5FOiZj5EXsvTuzql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44383486dc974da20af81e13f5dffbb3ad5e72fa6e89784ab710bc2c9f57e4c4_NeikiAnalytics.exe

Files

44383486dc974da20af81e13f5dffbb3ad5e72fa6e89784ab710bc2c9f57e4c4_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

414c0669f9e0759f6229040d3ceb686f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-runtime-l1-1-0

abort
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

ffi_call
ffi_call_go
ffi_closure_alloc
ffi_closure_free
ffi_get_struct_offsets
ffi_java_ptrarray_to_raw
ffi_java_raw_size
ffi_java_raw_to_ptrarray
ffi_prep_cif
ffi_prep_cif_var
ffi_prep_closure
ffi_prep_closure_loc
ffi_prep_go_closure
ffi_prep_raw_closure
ffi_prep_raw_closure_loc
ffi_ptrarray_to_raw
ffi_raw_call
ffi_raw_size
ffi_raw_to_ptrarray
ffi_type_double
ffi_type_float
ffi_type_pointer
ffi_type_sint16
ffi_type_sint32
ffi_type_sint64
ffi_type_sint8
ffi_type_uint16
ffi_type_uint32
ffi_type_uint64
ffi_type_uint8
ffi_type_void

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 233KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

414c0669f9e0759f6229040d3ceb686f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 233KB - Virtual size: 236KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 233KB - Virtual size: 236KB