4f3b467bf8e06ba827d83b27f3c8c470_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f3b467bf8e06ba827d83b27f3c8c470_NeikiAnalytics
Size

24KB
MD5

4f3b467bf8e06ba827d83b27f3c8c470
SHA1

9b9651072bb79bf711646b673c8fe54b0e973ee3
SHA256

aae36b2697793c9b266acb576fc32c305ad0cdff18b205a9926ef33ae6b5d9c7
SHA512

e1db9fb6c556989f100b31d4b8becec19a860e1cc34977cb5735150faee4716780e2a961805d637f067862814bcf479895714d1d3c0dcd02b2fb237032e9acf1
SSDEEP

384:JxlTXh2JwqJQntbkVybL+6b1Nixim07UXD85gH+rhe3RpMYple/qlD:JdlntbkR6bzixhwUXQ5g2cHMCb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f3b467bf8e06ba827d83b27f3c8c470_NeikiAnalytics

Files

4f3b467bf8e06ba827d83b27f3c8c470_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE