08d9ee527152574339691f37a3a9a970_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d9ee527152574339691f37a3a9a970_NeikiAnalytics
Size

26KB
MD5

08d9ee527152574339691f37a3a9a970
SHA1

5ea149fe6ee1aa94e2a430ad842c76c44c86925a
SHA256

71b47f67927bc91daeab4a83aec48f9e91ac5e88d51a5c9b63b320bc66c5d990
SHA512

4dbc629a6b444840c9b11df74859ffa8c4b988a6e863b9f3afc2ce38d973f16ddc674022935bfb1782bf25bb9c70cac827ab03444545ce1e82a9db1bfaedf8c8
SSDEEP

384:6xaP8tE7bJDSxx5cLes01hUnOvKaP9NbBFiq8sSr7xkZl6YQ93IRHx:+aP8yDSxLD2nOyaPbIWOCRHx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d9ee527152574339691f37a3a9a970_NeikiAnalytics

Files

08d9ee527152574339691f37a3a9a970_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

2a71d4f31a0049abe53363fda443e30e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipAlloc

kernel32

HeapFree
FindResourceA
LoadResource
SizeofResource
LockResource
GetProcessHeap
HeapAlloc
CreateFileW
WriteFile
CloseHandle
lstrcatW
OutputDebugStringW
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
LoadLibraryA

user32

UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
InvalidateRect
PostQuitMessage
SendMessageW
GetMessageW
wvsprintfW
EndPaint
FillRect
GetClientRect
BeginPaint
DispatchMessageW

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ