a0c0f6f4e65f14e1f2e594d01d896b90_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a0c0f6f4e65f14e1f2e594d01d896b90_NeikiAnalytics.exe
Size

101KB
MD5

a0c0f6f4e65f14e1f2e594d01d896b90
SHA1

a3249a2529c23b4a242e1af9719d9da999038b46
SHA256

19b8f8676f8ed419becbbf7f4f9875c106aef91eb1ed1a04dae8a67c2d2f5f52
SHA512

c063d17797dafd41c0cb68f868b33585d06e25eb468c3bd263ca1b13afae8591e50152f491da7fb93c7513cb90169ca54cfe40f330f90d6773c78cd39d3394ca
SSDEEP

3072:cGTou/Oj4ykXQd85JekqNyGtFIErSeMeTc7VPG:cGToZMY8tqNhFrSSTiZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0c0f6f4e65f14e1f2e594d01d896b90_NeikiAnalytics.exe

Files

a0c0f6f4e65f14e1f2e594d01d896b90_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE