472630f89e58e926f0d3c9245ec27860_NeikiAnalytics[.]exe

General

Target

472630f89e58e926f0d3c9245ec27860_NeikiAnalytics.exe
Size

72KB
MD5

472630f89e58e926f0d3c9245ec27860
SHA1

4a0b742bbdae508e2ae5dd818841b8d77a490641
SHA256

165c9d307a10b39276a842bd49e8d104b30bd5decf92a7c93d19efbaa3cc8705
SHA512

684b45fefb002c02050e1b39661eb801b863e1decfb550bdfb656f0ed1490a0801333c65b1615c82831f9b5b4361b98a3fb173867122a75e4b85cfbe5689e9f6
SSDEEP

1536:YgZL9S5PzVfP5VHAnToIfjIOlIOuiLYhA:YgZLAB5V0TBfFvuiLYhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
472630f89e58e926f0d3c9245ec27860_NeikiAnalytics.exe

Files

472630f89e58e926f0d3c9245ec27860_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

58ebe63bde2e8d9e022f7f601830ac71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_fdopen
fopen
_errno
malloc
sprintf
fwrite
fread
fclose
free
fprintf
fflush
fseek
fputc
strerror
clearerr
_initterm
_adjust_fdiv
_vsnprintf
ftell

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58ebe63bde2e8d9e022f7f601830ac71

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 744B

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 4KB - Virtual size: 778B

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 744B

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 4KB - Virtual size: 778B