4195484031c862ad2629d892bb469400_NeikiAnalytics

General

Target

4195484031c862ad2629d892bb469400_NeikiAnalytics
Size

28KB
MD5

4195484031c862ad2629d892bb469400
SHA1

ab7b066cbfa1b72b6faead31b6e2922479453902
SHA256

1767fe332f1af315150f35cb051df7b4f0b481ed58e2c349010f01e0612e2c94
SHA512

2862e390f0adcfe4f61be054d9a1bbf2aa8691a71da965bb35c7cdb50c372fd9b91f6a54ab46c3b8a3ae01aebf3a560144539956cade8e2dc500ad083e86160b
SSDEEP

384:lihsEv3B3zbFCdIQrGYD5WSnMzd5fjFY97KJ7kchn4G4:lEsQsdIj05WSMzd5r+xAz4G4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4195484031c862ad2629d892bb469400_NeikiAnalytics

Files

4195484031c862ad2629d892bb469400_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
GetStdHandle
WriteFile
DeleteFileW
CopyFileW
GetFileTime
GetLastError
GetCPInfo
CreateThread
CreateDirectoryA
FindFirstFileA
CreateProcessA
OpenFileMappingA
OpenFile
CopyFileExA
DeleteFileA
GetFileSize
ReadConsoleA

comctl32

ImageList_Replace
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Read
ImageList_Copy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Merge
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_AddIcon
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Draw
ImageList_AddMasked
ImageList_DragLeave

gdi32

AddFontResourceW
DeleteObject
AddFontResourceExA
SetTextColor
BitBlt
ExtTextOutA
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceA
GetBitmapBits
CreateSolidBrush
CancelDC
GetClipBox
AddFontResourceExW
GetPixel
AddFontMemResourceEx
DeleteDC
GetBrushOrgEx
CopyMetaFileA
GetCurrentPositionEx
ClearBitmapAttributes

advapi32

RegDeleteValueA
RegReplaceKeyA
RegReplaceKeyW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueA
RegQueryValueW
RegDeleteValueW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyA
RegEnumValueW
RegCreateKeyExW
RegQueryInfoKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 5.1MB

.rsrc Size: 1024B - Virtual size: 780B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 5.1MB

.rsrc
Size: 1024B - Virtual size: 780B