204cdd6ffcb427a80858eb5baa830440_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

204cdd6ffcb427a80858eb5baa830440_NeikiAnalytics.exe
Size

78KB
MD5

204cdd6ffcb427a80858eb5baa830440
SHA1

6fc02ca12cc9f5bdaab848b9512aaefa549ac0ed
SHA256

ad03eae311f67baa3777aac82fd786ec7321a47cbb5d909862ad9799f2f7f89f
SHA512

d265fec3dcd61050b88646addc5b3239b25943508fa09820fbd1e46a01bf6f8b6c1a0079b052750a44a60bac227ed2931e0477e0d362b0c338f340fc1d9da18d
SSDEEP

768:JWDnMge+QDKVZhPsED3VK2+ZtyOjgO4r9vFAg2rqVcBf55vVWL9CUk+/wcWVPZ8b:w/e+mKFYTjipvF26cZ0L4P+4V1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
204cdd6ffcb427a80858eb5baa830440_NeikiAnalytics.exe

Files

204cdd6ffcb427a80858eb5baa830440_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

28e46cf78fd543ccdc5071ec4c6c58bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

gdi32

GetWindowOrgEx
SetWindowOrgEx
CreateDCA

kernel32

ExitProcess
GetModuleHandleW
GetConsoleCP
SetConsoleMode
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ