ea02260c63d01407df29044fb53d9d90_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea02260c63d01407df29044fb53d9d90_NeikiAnalytics.exe
Size

69KB
MD5

ea02260c63d01407df29044fb53d9d90
SHA1

94994293dce905f7f76048690f98a05df134fe39
SHA256

0e6cf5b47bbcddd048683d96611bf4e8643e04d99afd7477c26c1dbfb6502226
SHA512

213dc670b8c007ef76b02a70c062a725ef340e020dbb907debbf62d7a4fbaf315c8c598513eee6ce0d2cdec968e0d4266f9747a1d6d3f829af546b3e66dc4b61
SSDEEP

1536:Kz2u4LJjBaECkLSi7xsYhaKDVmehFcxyP:KS8ELSGmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea02260c63d01407df29044fb53d9d90_NeikiAnalytics.exe

Files

ea02260c63d01407df29044fb53d9d90_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

7772dfa3e3a72b92db47c13e7be36e20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
CreateWindowExA
TranslateMessage
BeginPaint
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
SendMessageA
RegisterClassA

kernel32

GetStartupInfoA
GetModuleHandleA
CreateFileA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree

gdi32

TextOutA

comctl32

InitCommonControlsEx

shell32

DragQueryFileA

msvcrt

_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit
_XcptFilter
exit

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ