ca4597e1675e2225f7fd9a6b3e479080_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca4597e1675e2225f7fd9a6b3e479080_NeikiAnalytics.exe
Size

79KB
MD5

ca4597e1675e2225f7fd9a6b3e479080
SHA1

18a8ee2acd44523a952b368fb7a45dac59b67903
SHA256

dab8d50975c0bd881f9aa4569025ef3ec48028bf827d67a0f8ae3f93b00f43e8
SHA512

abf743ef91d6fa3e45fc47306372b645175740759bd5346de3708d8175b13681d51e82980233f9dc8329f7bab9897b3357c31442e473b3a76b9d957d60147ae7
SSDEEP

768:JWDnMge+QDKVZhPsED3VK2+ZtyOjgO4r9vFAg2rqVcBf55vVWL9CUk+/wcWVPZ8X:w/e+mKFYTjipvF26cZ0L4P+4V1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca4597e1675e2225f7fd9a6b3e479080_NeikiAnalytics.exe

Files

ca4597e1675e2225f7fd9a6b3e479080_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

28e46cf78fd543ccdc5071ec4c6c58bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

gdi32

GetWindowOrgEx
SetWindowOrgEx
CreateDCA

kernel32

ExitProcess
GetModuleHandleW
GetConsoleCP
SetConsoleMode
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ