1c98a986180e9e82e31e81fee1c73a40_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1c98a986180e9e82e31e81fee1c73a40_NeikiAnalytics.exe
Size

48KB
MD5

1c98a986180e9e82e31e81fee1c73a40
SHA1

e3df1dec68c5a832cdfe121461f4ac30ef6dfb33
SHA256

3399bbd5789baed1ab3fcdd6baf5769b61c5476079ad47a3260e31f04e41eac7
SHA512

d75632ff512776e66a55c1c4109d2494fe3fb0a522dfbfbe984f1d7ff5ff467a1e27d4ba31189e87d076e8aeea7b0c4d7391ceb9d0b0343ddec56e6fcbf0bfbb
SSDEEP

768:VHklHw1ezHKnz3hx1xsSixd0fTTI/Kly6e0Slrh:xQzm7/1xsPn0LTAKF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c98a986180e9e82e31e81fee1c73a40_NeikiAnalytics.exe

Files

1c98a986180e9e82e31e81fee1c73a40_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

522f5d46d0560fd04591c395007b7780

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA

kernel32

CloseHandle
CreateEventA
CreateFileA
ExitProcess
FlushFileBuffers
FormatMessageA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
LoadLibraryA
MultiByteToWideChar
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetFilePointer
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile

Sections

AUTO
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 986B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ