8e0a3ffe44ee33a5d59ee66ca6d8e790_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e0a3ffe44ee33a5d59ee66ca6d8e790_NeikiAnalytics
Size

47KB
MD5

8e0a3ffe44ee33a5d59ee66ca6d8e790
SHA1

bbfadffdc279b9cbc3d3064e5d83cbc3e7cf46b1
SHA256

6a75abcf402ea7b3420f076cb9c8d1a49e462eb81b0ebd92f35805e956e7d700
SHA512

ad68d1b439f07ec415e2b22bb141759bb8b118ccf60dbe432783df1eaa6fece732429fcb1fa81a8724e2c76f8b712470f6106ccf4a97dac2231afb4aecc9600c
SSDEEP

768:fpXhwnrCTnd8swmTWW3PksDnj1pAO5wzi:fpXzp8swDWfhki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e0a3ffe44ee33a5d59ee66ca6d8e790_NeikiAnalytics

Files

8e0a3ffe44ee33a5d59ee66ca6d8e790_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

444361781dee8fd0353521af5f624c97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExW
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA

kernel32

GetStartupInfoA
lstrcpyA
GetModuleHandleA
CloseHandle
GetCommandLineW
LoadLibraryExA
CreateEventW

comctl32

ord17

shfolder

SHGetFolderPathA

shell32

SHGetMalloc
FindExecutableA
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDiskFreeSpaceA
ExtractIconA
CommandLineToArgvW
DragQueryFileA
DragFinish
DragQueryPoint
SHGetFileInfoA
ShellAboutA

msvcrt

_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ