395e6eac93b75d0ed9e57fb198cd1e50_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395e6eac93b75d0ed9e57fb198cd1e50_NeikiAnalytics.exe
Size

4KB
MD5

395e6eac93b75d0ed9e57fb198cd1e50
SHA1

1b7f216daf5f9fbc6c8846cb4b507534eb98aca5
SHA256

da427c70ce71350441158ce8051e1c7c441ba3879de255211bb110006070b523
SHA512

06862f9f1e442aed18942d51c139a0b301b3ab65985fd31f79468f221b3ffea24d00e4069d759718b013a64e1d208bc4aefdcd9a3124d116f63b515a94ffa3b2
SSDEEP

48:698HexhmjzaWgmyrm0E/WDblt+LqiudYUBR+5cFXb6btAooxTN:Nenmjz7yrmb/g/+f7U+A4IT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395e6eac93b75d0ed9e57fb198cd1e50_NeikiAnalytics.exe

Files

395e6eac93b75d0ed9e57fb198cd1e50_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

6910755e58d11743bc8284ff5fa12074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
FindClose
FindFirstFileA
SetFileAttributesA

user32

MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExA

msvcrt

sprintf
malloc
??2@YAPAXI@Z
free
_initterm
_adjust_fdiv

Exports

Exports

UninstInitialize
UninstUnInitialize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ