479fd04302ee170a3a6396fc2e2092d52d6daaeb46a914a9cf0c48a90756bb6e_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

479fd04302ee170a3a6396fc2e2092d52d6daaeb46a914a9cf0c48a90756bb6e_NeikiAnalytics.exe
Size

153KB
MD5

0d1747bcd661e34c4dd988785e9a1500
SHA1

b46d2e5595ca7139d60e774b5bb31940e927066e
SHA256

479fd04302ee170a3a6396fc2e2092d52d6daaeb46a914a9cf0c48a90756bb6e
SHA512

16cd3703d020cfee278d5874f2856f7d5a391f382af91f10ace53d96d2e7023026e1264b3aef2dff887897331d29b4457db1302258a31379beed4f98570a1e89
SSDEEP

3072:9jxwTX7pKokzp7UDs8fYwcIa7rqPn5aZXO6xTs:9qTLJgQDs8QBaap9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
479fd04302ee170a3a6396fc2e2092d52d6daaeb46a914a9cf0c48a90756bb6e_NeikiAnalytics.exe

Files

479fd04302ee170a3a6396fc2e2092d52d6daaeb46a914a9cf0c48a90756bb6e_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

3ca01ed0b539c4ea715f9d97a805b53d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\constructicon\builds\gfx\one\20.40\drivers\dx\shared\mva_vhd\mcl_sdk\mmocldll\build\wNow64a\B_rel\amdmmcl6.pdb

Imports

opencl

clCreateContext
clBuildProgram
clReleaseDevice
clReleaseProgram
clGetExtensionFunctionAddressForPlatform
clReleaseContext
clGetPlatformInfo
clCreateContextFromType
clGetPlatformIDs
clCreateProgramWithBinary
clGetProgramInfo
clCreateProgramWithSource
clGetDeviceInfo
clGetContextInfo

kernel32

GetEnvironmentStringsW
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
RtlPcToFileHeader
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
RtlUnwindEx
SetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount64
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
Sleep
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
LCMapStringEx

Exports

Exports

mmCompileProgramForDeviceName
mmCompileProgramForDxDevice
mmFree

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ca01ed0b539c4ea715f9d97a805b53d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opencl

kernel32

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 6KB - Virtual size: 14KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 760B

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 6KB - Virtual size: 14KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 760B