d2dbed7ab5733aae6775ce67b36d4ef0_NeikiAnalytics[.]exe

General

Target

d2dbed7ab5733aae6775ce67b36d4ef0_NeikiAnalytics.exe
Size

340KB
MD5

d2dbed7ab5733aae6775ce67b36d4ef0
SHA1

c573006e8d41c3c1ce4996c0e18e78bdbf376596
SHA256

a1b36a6f89eea1069d3fd4786a85a10ebe87cee8f941b1d74b1064bd2856ac97
SHA512

ae13bba378a240ccd9b07deea5dbe5a04951e905f7628e8e14bd16c209d07bb7296d2d31f8027cca06ce036f4b1409f11c17fb1db02004a93a3454bcd6a90036
SSDEEP

3072:ZbUihc4nsHwo8soECAKzAdHs2qxnCtnTF7d0CdyAfalUVn1/6D8CB+RTh2k:Gi8VoNAKs9ltbdyPUVn1/PRN2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2dbed7ab5733aae6775ce67b36d4ef0_NeikiAnalytics.exe

Files

d2dbed7ab5733aae6775ce67b36d4ef0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

46397fdacca81280c1f99e158d786cb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenJobObjectA
lstrcpynW
EnumerateLocalComputerNamesW
ExitThread
CompareStringW
GetOEMCP
GetSystemWindowsDirectoryW
GetFullPathNameA
SetLocalPrimaryComputerNameW
GlobalMemoryStatus
OpenFileMappingW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxejodg
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rqvmxkb
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gumrkvc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kakxcjb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46397fdacca81280c1f99e158d786cb1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 44KB - Virtual size: 41KB

.brdata Size: 112KB - Virtual size: 112KB

qxejodg Size: 32KB - Virtual size: 32KB

rqvmxkb Size: 32KB - Virtual size: 32KB

gumrkvc Size: 32KB - Virtual size: 32KB

kakxcjb Size: 4KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 44KB - Virtual size: 41KB

.brdata
Size: 112KB - Virtual size: 112KB

qxejodg
Size: 32KB - Virtual size: 32KB

rqvmxkb
Size: 32KB - Virtual size: 32KB

gumrkvc
Size: 32KB - Virtual size: 32KB

kakxcjb
Size: 4KB - Virtual size: 4KB