31fd11496d35f6c846bcb862e4fc18f0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31fd11496d35f6c846bcb862e4fc18f0_NeikiAnalytics
Size

32KB
MD5

31fd11496d35f6c846bcb862e4fc18f0
SHA1

7d3729a3cd933776cf2fb0d12485e65e3ec120cf
SHA256

fd170d9ea64f3a34f20e7569ff138332c8c4043bfeda32242c24a59e3d0d286a
SHA512

6d53eae8ba2f764fe67586a9c7ddfa8f1f7ef0493838a62e3d42700798031ec5bc38d5e195c0abe5f4c9fa723eaf718432290bc97709df2d352b50be02c1dfd8
SSDEEP

384:AGNkzd6k6qeGOIuQt50yV3GQhn93MKguGikhscLokwh6xtgOlpt4Ltxitn89v2WI:A+6lS4N3GQP3XLBgoCx7lpKLGCF2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31fd11496d35f6c846bcb862e4fc18f0_NeikiAnalytics

Files

31fd11496d35f6c846bcb862e4fc18f0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

fe487be3ca290bea84564888c7619239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
EndPaint
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

CloseHandle
lstrcpyA
LoadLibraryA
GetProcAddress
GetLastError
GetCommandLineA
ExitProcess
CreateFileMappingA
CreateFileA

gdi32

CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ