2890eb7c9b2c34b5cfe6e0036ad3d260_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2890eb7c9b2c34b5cfe6e0036ad3d260_NeikiAnalytics.exe
Size

35KB
MD5

2890eb7c9b2c34b5cfe6e0036ad3d260
SHA1

af35ec4aaa6e17620e28f4ecfe8b895a2caedd3f
SHA256

7dbece27eb7b34e38c2f8cd7f1cfccbfc50f01e566857f1f22cdc9bb39ab3f81
SHA512

133bcd27f9718929243a6e8950f75854af0e9917eff93e831fc92100019e18ebcaee747845f4c28a843f36794b9cab6f906a94afca24fde04d1eff99b3fa6dbe
SSDEEP

768:NObLtFa4KhRvzGdgpH8tyfiQeOPRz2LWUMZX/8q:ofvsVLd8tuXeOZaLZgEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2890eb7c9b2c34b5cfe6e0036ad3d260_NeikiAnalytics.exe

Files

2890eb7c9b2c34b5cfe6e0036ad3d260_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

3ba6010fa2b7d58dc680694f419d288d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
SizeofResource
VerLanguageNameA
LoadResource
VirtualFree
lstrlenA
GetModuleHandleA
GetCommandLineA
FindResourceA
VirtualAlloc
ExitProcess

user32

DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
EndPaint

gdi32

CreateCompatibleDC
DeleteDC
SelectObject
BitBlt

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ