808b0b569c7b4cfb4b13cc3ab5f8d320_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

808b0b569c7b4cfb4b13cc3ab5f8d320_NeikiAnalytics.exe
Size

57KB
MD5

808b0b569c7b4cfb4b13cc3ab5f8d320
SHA1

bcf78da6fa2eb12faf69f876d021e4bbba703af1
SHA256

555f4a397078eafe3e7b054b3730546a43b753c0405b5f3a07141623205be1ba
SHA512

72b537e79e97e73feb4376042147f6e1fb8522178d80fc45a30f73cdc4b5f81544f14b3dc2c0181721042527b5dd2fff33d1cfa4e78a771fc0ceda9fa98384bb
SSDEEP

768:IGnekOEPJjjGdjzAjluDhvRQUB4LSeKn+lTFPG8BY96V6ZG:FnnxJUsjAFvRQUB4mV8T0FgVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
808b0b569c7b4cfb4b13cc3ab5f8d320_NeikiAnalytics.exe

Files

808b0b569c7b4cfb4b13cc3ab5f8d320_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

5c7bd8e9f46408bfe57efe5104eaa1c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
RegisterClassExA
SendMessageA
ShowWindow
DefWindowProcA
GetFocus
EnableWindow
UpdateWindow
IsZoomed

kernel32

CreateFileA
HeapAlloc
HeapCreate
HeapDestroy
ExitProcess

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ