59e5365621c4f0828dbfa8c3d0c84230_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59e5365621c4f0828dbfa8c3d0c84230_NeikiAnalytics.exe
Size

915KB
MD5

59e5365621c4f0828dbfa8c3d0c84230
SHA1

3e69b317a18e07538819127aa6cfaa3a06350f5c
SHA256

24392762cceda79cb0298048d8566a1d89ef7f842f78162cf9be181c7644f70a
SHA512

dc356cb7daaa9bce4d17527ded5ea1b7cad15bc614443f3a1d6f1bf4fe6cfadfc069942396894d8df9a7acdaee13bc2dd7888ab796489ef510b9fd3233b00df8
SSDEEP

12288:Wh3ZukLF5kU0o3mOxXJXlZCRX9hnJKLqOHB7rFQjCVUT9WwS:WhMkxBWQXJ+9hQTxhQmVUT9WT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e5365621c4f0828dbfa8c3d0c84230_NeikiAnalytics.exe

Files

59e5365621c4f0828dbfa8c3d0c84230_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

8c8cd2fe8f466202b9cc82f6156dad3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ropf
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ