38373b1a92069566ab8df901fd2df9f0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38373b1a92069566ab8df901fd2df9f0_NeikiAnalytics
Size

81KB
MD5

38373b1a92069566ab8df901fd2df9f0
SHA1

df0b35f36456d78f7389b98a88efec9f1d4fcdf3
SHA256

795e126da95607d680d8eb754905ca108c2bc4b813eea6aaa274e6d5561c131a
SHA512

be1088260e2902e5c64568cc39c21efdb3c6554e9f581f9b7619d2c5690af3ffa7a32f9d15ebdd22d3740c31802589280ac048238e5adf65636e4f5a6f242f83
SSDEEP

1536:4579ucrFmJQqO3VhDWiC+i6QAbcDM48tcMw0Sf9:IxmJQqO3VpWiC+i6QAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38373b1a92069566ab8df901fd2df9f0_NeikiAnalytics

Files

38373b1a92069566ab8df901fd2df9f0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

64ae6f7ad7b9fe42fe92f6ebc5207506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateFromHDC
GdipAlloc
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipDeleteGraphics

kernel32

LoadLibraryExA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryA
LoadLibraryW
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetCurrentProcess
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ