6785cc5af5c6d4443174db41734689b0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6785cc5af5c6d4443174db41734689b0_NeikiAnalytics
Size

52KB
MD5

6785cc5af5c6d4443174db41734689b0
SHA1

3115d633e7a2350de72b49fac9d96f4a5c78b4b2
SHA256

4f7a65f2a55874acb97e4cdcd963469dcecaba1984841d2f7d750d173ce616de
SHA512

bc77828f579fb78da86de70e6e9039952a21ca589607ab28e12e74a82c994ed21b30a3390dac9d05032f61cdbca854ea01d91d230fc2b7404fc1243b2c558250
SSDEEP

1536:q+vjNmnVojXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8LYD3DZFYilQNAgqmyMJ:q+vjNwVojXRrs9sINeZEtejlIkoLN12h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6785cc5af5c6d4443174db41734689b0_NeikiAnalytics

Files

6785cc5af5c6d4443174db41734689b0_NeikiAnalytics
.exe windows:1 windows x86 arch:x86

683692d4746aa100a2b6043db7fe5945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpyW
ReadFile
CreateFileW
HeapFree
CloseHandle
GetFileSize

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ