d245404998734866c9518a736fabfd20_NeikiAnalytics | Triage

Sharing

General

Target

d245404998734866c9518a736fabfd20_NeikiAnalytics
Size

24KB
MD5

d245404998734866c9518a736fabfd20
SHA1

62f7dc7b609f6cb62449d84dd7786614560a19ea
SHA256

ad9f99cd68b71c27efa860931260cb69db40222ef9e6fe41ef2e651b82d60c30
SHA512

fa4b9db8da78578b63e8eb9420b993a82f8a62004e5b6dfcb2091e43d1ed04e60105e75f99b355df7b51b4554a7183aa39b32c31165b150766d0503951d3a3bd
SSDEEP

384:b2AsyDTIWwt2JdtTsGH1ARxruGO8o+4tdmuQc1PbJiWmJc:y+DT/jTsGVNQMfJif+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d245404998734866c9518a736fabfd20_NeikiAnalytics

Files

d245404998734866c9518a736fabfd20_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

4517779c858c277fe37111eb804668e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
BeginPaint

kernel32

VirtualFree
ExitProcess
GetCommandLineA
LoadLibraryA
VirtualAlloc
CreateFileA
GetProcAddress
lstrlenA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar

gdi32

CreateCompatibleBitmap
CreateFontIndirectA
DeleteObject
CreateCompatibleDC

ole32

CoUninitialize
CoInitialize
CoCreateInstanceEx

oleaut32

SysFreeString
SysAllocStringLen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ