564de8b5e311a8ca1eab23b8571a045e42e84ec1d248ba38f432ae92d8e8d048_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

564de8b5e311a8ca1eab23b8571a045e42e84ec1d248ba38f432ae92d8e8d048_NeikiAnalytics
Size

42KB
MD5

a5d500254a5b15329f26ee713b3bea50
SHA1

c8d55517c35a8895a587941049d5493306d96ee1
SHA256

564de8b5e311a8ca1eab23b8571a045e42e84ec1d248ba38f432ae92d8e8d048
SHA512

5df5ae97e56ab68b15c8ea28502297e9f727b041db064b606b6f092d29ac7436cbe5f488f958dc7f2d91ff8dcb1099acfe0e8150f1366d54c1e4628d3ac6598a
SSDEEP

768:8Qv/YOZIgQtz8GEkT9oe2lxUCuwE3u89MtdEI2MyzNORQtOflIwoHNM2XBFV7WBC:tv/pZIgQtz8GEkT9oe2lxUC9E3tMtdEz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
564de8b5e311a8ca1eab23b8571a045e42e84ec1d248ba38f432ae92d8e8d048_NeikiAnalytics

Files

564de8b5e311a8ca1eab23b8571a045e42e84ec1d248ba38f432ae92d8e8d048_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

2121fd23b453f538ab8eb2236aa5f534

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FillRect
ShowWindow
SendMessageA
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
GetDC
GetWindowRect
UpdateWindow
SetFocus

kernel32

GetCurrentThreadId
GetLastError
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
DeleteFileA
GetCurrentProcessId
GetCurrentProcess

gdi32

CreateFontIndirectA
BitBlt
CreatePen

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ