a090e6ec2370bc1086e9e4c8567376d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a090e6ec2370bc1086e9e4c8567376d0_NeikiAnalytics.exe
Size

28KB
MD5

a090e6ec2370bc1086e9e4c8567376d0
SHA1

a01ac56cc6641286cfcdfdc53b2f3a3a73e7f5b8
SHA256

1d962afad24a876282662f7ec30e267e0e823345322dae2bffd81850f38012c2
SHA512

d255f98d9ff22caf9bd0d21892453047172dc9e0809fdf6c1c23a22d0a2772f2086486770253f6f53914fca9eb73c14a58c4e1fa6f880d615bc04a4da7d066d4
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgc+:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a090e6ec2370bc1086e9e4c8567376d0_NeikiAnalytics.exe

Files

a090e6ec2370bc1086e9e4c8567376d0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE