1d2767a9a02d31e35d20807c549a9b00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d2767a9a02d31e35d20807c549a9b00_NeikiAnalytics
Size

26KB
MD5

1d2767a9a02d31e35d20807c549a9b00
SHA1

5709776245110ea50f7def1b55dfaad6737d7cbf
SHA256

7de09fa06e3bf08ace02d2015f0d98568c4cf80f1aa4c6a32dad3323102cfaf7
SHA512

b4e4d923052f9bac0cc6f8596ab2ea1996180292d60553d5ec9b51da423ea3f69f37f76cec8fb7fc4d11f2f103a85e5d64049bd6e5ddfbda662ff2a4d1493b4b
SSDEEP

384:GGjw95yGiZqhpTUohIo/U4nllHQCh1I6xpPsvb8pZgw:GGGyDqhpJ+o/U4nXQQ1iT8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d2767a9a02d31e35d20807c549a9b00_NeikiAnalytics

Files

1d2767a9a02d31e35d20807c549a9b00_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f8d8aee08196483a265bcf1e1242daab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
CloseHandle
GetModuleHandleA
LoadLibraryA
HeapAlloc
GetProcessHeap

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ