e1e7de598d1d284939e2f37257d0c140_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1e7de598d1d284939e2f37257d0c140_NeikiAnalytics
Size

80KB
MD5

e1e7de598d1d284939e2f37257d0c140
SHA1

5a6a5a32649c4c42350b0a62acda78546240e811
SHA256

131071f8710439a00cbf11a673543d0592c0223335611fbb18ce1677f848b72f
SHA512

0c9d201052cbe38620084e44450d13d88f02f3aa8efba7a7e36fac969665940c974d6061ecc844a9b2e216ae2637341c8f720b5d6d2c6689034589bc09be893d
SSDEEP

1536:4579ucrFmJQqO3VhDWiC+i6QAbcDM48tcMw0Sfa:IxmJQqO3VpWiC+i6QAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1e7de598d1d284939e2f37257d0c140_NeikiAnalytics

Files

e1e7de598d1d284939e2f37257d0c140_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

64ae6f7ad7b9fe42fe92f6ebc5207506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateFromHDC
GdipAlloc
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipDeleteGraphics

kernel32

LoadLibraryExA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryA
LoadLibraryW
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetCurrentProcess
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ