bea6779407e40b6bf5bca8500db76b40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bea6779407e40b6bf5bca8500db76b40_NeikiAnalytics
Size

34KB
MD5

bea6779407e40b6bf5bca8500db76b40
SHA1

7e44be77c2ee4bfb9a1941fbaee15bcdbc4718ed
SHA256

a0963b242e8e66afb6d92f1e08f79f067c6027f1a18191777088902ec3da7132
SHA512

2c0b113130d2ac8fb345709be92fa5ff80f2a9db526d44abfa751ff70e4a5333267dd11cfbd7fa0130824522368bcdec9a4cc973317c7cf4d7b10fd7d0129912
SSDEEP

768:LQTmV7OofEGM8j/jPnUZrdGPtmx3T/uo5uU:LQTtSM8vPnUZRQ63T/uuuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bea6779407e40b6bf5bca8500db76b40_NeikiAnalytics

Files

bea6779407e40b6bf5bca8500db76b40_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

bef15b6d6e736ad99d551c5b799de830

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess

comctl32

ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ