dfd4024fa7a0a8af71877f3bec7b28f0_NeikiAnalytics[.]exe

General

Target

dfd4024fa7a0a8af71877f3bec7b28f0_NeikiAnalytics.exe
Size

705KB
MD5

dfd4024fa7a0a8af71877f3bec7b28f0
SHA1

e8c06751e20566399a8bfd75dfaa3a5bccd53499
SHA256

fc36300fdea533bbe85f8ea1d8f0e71d361dc710281c81cb981d66a7e4950770
SHA512

bc213c239d340525ab3e296559dfbe323031be42d36257eccb4eb07cfe39e38c83f1978dcabcc257b051036209be27f34d7b8186b088abdc18b395f04714aabd
SSDEEP

6144:WITkBXkHQYwik2SN1KFDFQ8emCG8L9WYLQQD2Mqmnzc5erFWDqyZy2l2P/H4h6M4:mj97NmCG8ZiMvnY5iWOK92XH0Mf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfd4024fa7a0a8af71877f3bec7b28f0_NeikiAnalytics.exe

Files

dfd4024fa7a0a8af71877f3bec7b28f0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

c2dd4ad0eb86cc944e7c652fd745395d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_controlfp
__set_app_type
strchr
_exit
_acmdln
_XcptFilter
exit
__setusermatherr
__getmainargs
_initterm
__p__fmode
_adjust_fdiv
__p__commode
_except_handler3
sprintf

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

kernel32

GetProfileStringA
GetCurrentDirectoryA
GetSystemInfo
lstrcmpA
WriteProfileStringA
GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA
DeleteFileA
GetVersionExA
GetShortPathNameA
SetLastError
GetPrivateProfileStringA
lstrcatA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileAttributesA
GetSystemDirectoryA
CompareStringA
lstrcpyA
ExpandEnvironmentStringsA
GetTempFileNameA
GetCommandLineA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
WritePrivateProfileStringA
lstrcmpiA

user32

GetDesktopWindow
LoadStringA

shell32

SHGetMalloc
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoUninitialize
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2dd4ad0eb86cc944e7c652fd745395d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

shell32

ole32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 512B - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 3KB