58f53fb1b6b7d02db05366c7669b3b50_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58f53fb1b6b7d02db05366c7669b3b50_NeikiAnalytics
Size

36KB
MD5

58f53fb1b6b7d02db05366c7669b3b50
SHA1

55b57200459620772bdf8cdb99a626d948cfca5c
SHA256

238037e3f2660f1342bcb942ba5bbe5f5d1f5eacefac7ce177d1442ad2a53845
SHA512

ac037bacad8deb9c7973a214ee70c2a65b108297359bbc5079f5fc7c0e56398adf5b0f5f9c3268503ad92d65f4e13dd5840c78181557062bf6e8b574afc345b7
SSDEEP

384:cKUDthWY/ANpYL3QVvSwBRcDgYCNXGQaI/I51Ee2m3wJp6R3IYsBl3VRf:SWTNyMhhvcgNWQBG1Ee/Mg6dTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58f53fb1b6b7d02db05366c7669b3b50_NeikiAnalytics

Files

58f53fb1b6b7d02db05366c7669b3b50_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

1767080617bf8443c0422165e2b8ce4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetLastActivePopup
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
CreateWindowExA
LoadIconA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
WriteFile
ExitProcess
GetFileSize
CloseHandle
GetTickCount
GetEnvironmentStringsA
lstrcatA
lstrcpyA
GetModuleHandleA
LoadLibraryA
GetTempPathW
GetProcessHeap
CreateFileW
GetLocalTime
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

comctl32

InitCommonControlsEx

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ