889101d7b421333aef1f1b9e4a68ac60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

889101d7b421333aef1f1b9e4a68ac60_NeikiAnalytics.exe
Size

4KB
MD5

889101d7b421333aef1f1b9e4a68ac60
SHA1

211d32d6d58b091e10b04ca3da9d4e222330415f
SHA256

f2cfb8a1c44e21a68dd9b7c6fd5c9e44632447225a48173e45c349a64c580b5d
SHA512

612e36eb2614036ee046264459434a811d415e9358898c79c653aab5827b4ac22a16ccbf6d2a5abaac614d6f78c1399816dc4026018ff5852b428dda4e5f7528
SSDEEP

48:Zdypi+Wyi18DN0nChTIE6nc9fhXcGEOh6Jd9ga93RsUpnA7B8mOo4jUx9KT+ua/:Zcwv4mcWKh96tgC3RxpnKymV44oa/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889101d7b421333aef1f1b9e4a68ac60_NeikiAnalytics.exe

Files

889101d7b421333aef1f1b9e4a68ac60_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1009B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ