a26417d08467100fa9bfd1c3febb4130_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a26417d08467100fa9bfd1c3febb4130_NeikiAnalytics
Size

81KB
MD5

a26417d08467100fa9bfd1c3febb4130
SHA1

5976ca8730e73e31ce3353278a763bc2a50b7dc1
SHA256

7a81ea5890885bff00f48e9844f34bd1509f6e97ffb333c930d2e20016a6a1b1
SHA512

4d0f88eb92e1f921d97e37766e45e68a278b8becfdead967b25907ec652a752c162169c047c3b9de16338cd4f8697d9f39f48b97d571f91e738051203795ee58
SSDEEP

1536:5Es1L9HjqBURJaWCgE4q5ysCtL4mTympfwVZeLc+V:5Z1L9DqKXaWCznysCtL9VfIeLhV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a26417d08467100fa9bfd1c3febb4130_NeikiAnalytics

Files

a26417d08467100fa9bfd1c3febb4130_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3173ea1a90fa1244ac4d84c950beaf27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cdlli15

_SqlRunStartup@16

kernel32

LocalFree
_lread
_llseek
GetModuleFileNameA
_lclose
LocalAlloc
_lopen
GetStartupInfoA
GetModuleHandleA

user32

LoadStringA
MessageBoxA
wsprintfA

msvcrt

_exit
_adjust_fdiv
__setusermatherr
_splitpath
memchr
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_controlfp
__p__commode
__p__fmode
__set_app_type
_except_handler3

Exports

Exports

GuptaProgId1

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 891B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ