50d3dc96efc42b6b0cc7da339d1a5740_NeikiAnalytics[.]exe

General

Target

50d3dc96efc42b6b0cc7da339d1a5740_NeikiAnalytics.exe
Size

1.4MB
MD5

50d3dc96efc42b6b0cc7da339d1a5740
SHA1

718ce4d3a39bea1746d07741cb4b463862ea6295
SHA256

4a74bccaec90fe193c5dd3150297369e57b955e1decaa6855d8e1d53be767cf5
SHA512

a05a37c07c09d574a72e5d94f88c68f80be0affaec97fa56224eeb7b1c4ea9d80109ed0c249e7275d767c937a67c5b1daeee7eb9f8cb1888898cc4f88a972a47
SSDEEP

24576:IqxSovubEJSIgkkhfoOz7lolihO3A6Pa2xYmX/z9nkKvZ/f1ZjczDquf0pUz1VWj:TxjvZJ6thfzz7l5O3xLRP1BdZYnb0M1Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
50d3dc96efc42b6b0cc7da339d1a5740_NeikiAnalytics.exe

Files

50d3dc96efc42b6b0cc7da339d1a5740_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

0f34cbf703ace134e0a8e1bf7e4bfb16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindClose
lstrlenA
GetModuleFileNameA
CreateDirectoryA
FormatMessageA
lstrcpyA
lstrcatA
FindNextFileA
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
Sleep
RemoveDirectoryA
ReadFile
WriteFile
GetEnvironmentVariableA
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
LCMapStringA
SetEndOfFile
LCMapStringW
GetProcAddress
SetEnvironmentVariableA
LoadLibraryA
GetACP
CompareStringW
GetOEMCP
CompareStringA
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
SetUnhandledExceptionFilter
WideCharToMultiByte
GetCPInfo
FreeEnvironmentStringsA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
CreateFileA
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar

user32

MessageBoxA
CreateDialogParamA
SendMessageA
LoadCursorA
ShowWindow
UpdateWindow
GetForegroundWindow
SetCursor
DestroyWindow
GetDlgItem
IsWindow
wsprintfA

comctl32

ord17

shell32

ShellExecuteExA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f34cbf703ace134e0a8e1bf7e4bfb16

Headers

File Characteristics

Imports

kernel32

user32

comctl32

shell32

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 146KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 146KB

.rsrc
Size: 16KB - Virtual size: 12KB