17fefd75c68a071be24f42378c7e07c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17fefd75c68a071be24f42378c7e07c0_NeikiAnalytics.exe
Size

97KB
MD5

17fefd75c68a071be24f42378c7e07c0
SHA1

9065b7716d0c2bf0d70a4549081101b394fec5ac
SHA256

2a01f1e5112281919ec159bd205be711f4cf0f464c5e19974bca52798a453335
SHA512

a589b8177189d8ed1f7a9fcd8be9b1667f85d1fa61717a8797573548a71d274ea45e3fb3b6d114a6ccdf5a712d22afb77edae9fc81233faaf9057d169f9af259
SSDEEP

1536:PwVi/hV2KpynwWWaMty99Qp2DZdCCKHDVffhshlrsRLzVevc61Pa8:PwVMV2bw+9Qp2DZAp+lrstU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17fefd75c68a071be24f42378c7e07c0_NeikiAnalytics.exe

Files

17fefd75c68a071be24f42378c7e07c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

bef15b6d6e736ad99d551c5b799de830

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess

comctl32

ord17

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ