b978ed81b5daf454e0afe970ece57920_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b978ed81b5daf454e0afe970ece57920_NeikiAnalytics
Size

34KB
MD5

b978ed81b5daf454e0afe970ece57920
SHA1

458b9c856594ecc4815a7441d0b2f8f0517eaf91
SHA256

7da68b8ef043fd9921a16d0825701ce7346ef9a7e0e7af9f3374b5cb440fc0b4
SHA512

1b862203779fa9bf89ad9f4a8884e319d28df35d7f2b6d427ee0f2b14c52d5c5462c185204de14075d07750958584b5bc322c9f106794f7076c31542eeb24207
SSDEEP

384:cstTQ6ymVaIOanfRDrE1G3JRvwNUsu7csOcS4PmA0VZrXNxMm4pYYO1TxNldfDE8:LQTmV7OofEGM8j/jPnUZrdGPtmx3dgjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b978ed81b5daf454e0afe970ece57920_NeikiAnalytics

Files

b978ed81b5daf454e0afe970ece57920_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

bef15b6d6e736ad99d551c5b799de830

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess

comctl32

ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ