250695a27f80d6d7b8e2273c706281f0_NeikiAnalytics[.]exe

General

Target

250695a27f80d6d7b8e2273c706281f0_NeikiAnalytics.exe
Size

12KB
MD5

250695a27f80d6d7b8e2273c706281f0
SHA1

467ef194dea3fee16a192e5eb23478a82099fd10
SHA256

7dc45110cc8ce4796fe3b6c65bde06ed6ae3aa39d428d3205d621f66fc91b7da
SHA512

fcdfbbe2b1353c860829684a66b3cf716aecd34f2a633bf1c8a69581050f59e42b98b2b0014e9298d072b1e6cbfcf89387190875ceb9079fb98a845ccbf27106
SSDEEP

192:lWYfjQVUcLIjtAg6dXMb8FbNVJjgN+AT3:lNfjA7gYXM8FbNbzAT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250695a27f80d6d7b8e2273c706281f0_NeikiAnalytics.exe

Files

250695a27f80d6d7b8e2273c706281f0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

c197827dd08b42077c3ec48999ccc9c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

c60runx

Cla$CLEAR
Cla$clearstr
Cla$code
Cla$DecAdd
Cla$DISPLAY
Cla$DPopDec
Cla$DPopUlong
Cla$DPushDec
Cla$DPushLong
Cla$DPushULong
Cla$ERRORCODE
Cla$FILEERRORMSG
Cla$FILE_APPENDf
Cla$FILE_BUILDf
Cla$FILE_CLOSE
Cla$FILE_COPY
Cla$FILE_CREATE
CLA$FILE_DESTROY
Cla$FILE_FLUSH
Cla$FILE_NEXT
Cla$FILE_OPEN
Cla$FILE_REMOVE
Cla$FILE_SETf
Cla$FILE_STREAM
Cla$freewindow
Cla$init
Cla$MessageBox
Cla$OPENwindow
Cla$PushLong
Cla$PushString
Cla$PUTINI
Cla$pwopen
Cla$StackConcat
Cla$StackConcatR
Cla$StackErrstr
Cla$StackRotate
Cla$storestr
Wsl$CloseDown
_exit
_free
_malloc
__sysinit
__sysstart

c60tpsx

TOPSPEED

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cwtls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cwdebug
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c197827dd08b42077c3ec48999ccc9c0

Headers

File Characteristics

Imports

c60runx

c60tpsx

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 2KB

.cwtls Size: 512B - Virtual size: 16B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 512B - Virtual size: 408B

.cwdebug Size: 512B - Virtual size: 28B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 2KB

.cwtls
Size: 512B - Virtual size: 16B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 408B

.cwdebug
Size: 512B - Virtual size: 28B