570893d496000d00e8d376596368c59f45d39517b8a1fae06048aabe643decc1_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

570893d496000d00e8d376596368c59f45d39517b8a1fae06048aabe643decc1_NeikiAnalytics.exe
Size

705KB
MD5

8e3092482cac10ebceec5c9c9c8cadd0
SHA1

e95f8996a154a8f067fb878b8c01e8362d2cbfac
SHA256

570893d496000d00e8d376596368c59f45d39517b8a1fae06048aabe643decc1
SHA512

eae1780d04a217cca0a5a5b2e90707eca8fd72098647158460a093eee950ca24aba2de7341d04043e3157bbd7f1583da4c1e5ab57e3da0a5527be94e99001c99
SSDEEP

12288:r3FNs5ox4wz8cOCxB7w0ucQURcdsd3DtEIMr:xNpxZzZOCxB7w0ucQURcwxEIMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
570893d496000d00e8d376596368c59f45d39517b8a1fae06048aabe643decc1_NeikiAnalytics.exe

Files

570893d496000d00e8d376596368c59f45d39517b8a1fae06048aabe643decc1_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

e2a461dd2061969de6752af0ba6667dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

aout_CheckChannelReorder
block_Alloc
config_ChainParse
date_Get
date_Increment
date_Init
date_Set
decoder_NewAudioBuffer
us_atof
var_GetChecked
vlc_Log
vlc_meta_AddExtra
vlc_meta_New

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_iob
_lock
_onexit
_snwprintf
_stricmp
_unlock
calloc
exit
fprintf
free
fwprintf
fwrite
malloc
memcmp
memcpy
memmove
memset
qsort
raise
realloc
strchr
strcpy
strlen
strncmp
abort
acos
atan
toupper
vfprintf
wcscpy
_write
_strdup
_open
_close

user32

MessageBoxW

Exports

Exports

vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 573KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 968B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2a461dd2061969de6752af0ba6667dc

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

advapi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 115KB - Virtual size: 115KB

.data Size: 512B - Virtual size: 92B

.rdata Size: 573KB - Virtual size: 573KB

.bss Size: - Virtual size: 968B

.edata Size: 512B - Virtual size: 163B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 9KB - Virtual size: 9KB

/4 Size: 512B - Virtual size: 32B

.text
Size: 115KB - Virtual size: 115KB

.data
Size: 512B - Virtual size: 92B

.rdata
Size: 573KB - Virtual size: 573KB

.bss
Size: - Virtual size: 968B

.edata
Size: 512B - Virtual size: 163B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 9KB - Virtual size: 9KB

/4
Size: 512B - Virtual size: 32B