5fe50bb26f9af0611a88a350019880d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fe50bb26f9af0611a88a350019880d0_NeikiAnalytics
Size

24KB
MD5

5fe50bb26f9af0611a88a350019880d0
SHA1

769da46e37f2498df7b58a4a900ecdcc50271675
SHA256

4b4994dcf5a5ac2f78b4ea47cc2e9be402974d85d798fd984f35ae8fbe4ef567
SHA512

210161758795604d80734612abf14f8b30679626612f7781223d16d0379b9a75e37544eaa7f4376c3d72f14a648f634fa0c0a1deca76de2e23e3381c36dbe6b3
SSDEEP

384:liAnnQJU75HDVy+NK0G4NghryIVblObrh6gzDTjZql4mD:AuYGRlNghryIVR48gzPjZfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fe50bb26f9af0611a88a350019880d0_NeikiAnalytics

Files

5fe50bb26f9af0611a88a350019880d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE