91bc9361d35212f62060f382d7790220_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91bc9361d35212f62060f382d7790220_NeikiAnalytics
Size

57KB
MD5

91bc9361d35212f62060f382d7790220
SHA1

f1130c35f4893bf13e572d961afb5a36d5bd835c
SHA256

bf2d806e7f6ca4b73802a1c43e9ed6e8d76ece7b4d718e7ad21c137bfbd82f53
SHA512

5f89ea3aa421a00fd3a3a88036461838250a6ca569d32541d1d28bf8edd1f3eeada840caa07efacf3c70bec2cc8477e248762097aa301095fedd4c9998758817
SSDEEP

1536:DIzGnACUax0iOxWLsNIGMu5sDgErEw/4YFF:aFa/eWLsNtR5YgEV4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91bc9361d35212f62060f382d7790220_NeikiAnalytics

Files

91bc9361d35212f62060f382d7790220_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

ea8550e9239ac8b90463ee7d048c80a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowOwnedPopups
SetFocus
OemToCharA
LoadIconA
LoadCursorA
LoadAcceleratorsW
IsCharLowerA
GetMessageA
GetDC
FillRect
DrawIcon
DestroyCaret
CreateMDIWindowA
CreateDesktopA
CharToOemA
wsprintfA

kernel32

FreeResource
GetCommandLineA
ExitThread
EnumResourceTypesA
EnterCriticalSection
RaiseException
SetEndOfFile
TlsGetValue
UnmapViewOfFile
lstrcpyA
lstrcmpiA
lstrcatA
OpenFile

oleaut32

OleLoadPicture
RevokeActiveObject
SafeArrayAccessData
SafeArrayCreate
SafeArrayDestroy
SysFreeString
SysReAllocString
ClearCustData

Sections

.text
Size: 22KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ