a7d6afcff0710464bbc539a55aa544c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7d6afcff0710464bbc539a55aa544c0_NeikiAnalytics.exe
Size

562KB
MD5

a7d6afcff0710464bbc539a55aa544c0
SHA1

a98439213ec49fabf49e16f8f02a1b836878f80e
SHA256

ad8b010bf2735ab8f5612ebb3c7570531ade176364ae605c21d5a84f2c64d1cf
SHA512

d710baa83bb3d63ac80b98eb42400dadc131afd415dfa3b814d9e9766293ab52ec62ad9112db86d751b3e37337b88dc5b9b4e24fa3566eba3a5f934fd947ed2f
SSDEEP

12288:fEf3kAleMhq/MJ/LXByqNbvRpGoX+V4KTuJiG:feZer/c/TByqNbioOWrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d6afcff0710464bbc539a55aa544c0_NeikiAnalytics.exe

Files

a7d6afcff0710464bbc539a55aa544c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1f172e7bdb6411a467a4773ece36264e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
QueryPerformanceCounter
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE