994ef5ccb911d4d464de5cd364827980_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

994ef5ccb911d4d464de5cd364827980_NeikiAnalytics.exe
Size

79KB
MD5

994ef5ccb911d4d464de5cd364827980
SHA1

4a14347b569bb8a435dea7016fce8f5d1c7ed008
SHA256

a31fddb9edd3b73434ce77db4e0c2b01e492bc0fc6ddbbea374f5fbfccde61bc
SHA512

5854d932ac91892aece9a06823d5e3a6455307482d91867e0956c71215a87f909f79f553c72190a3c08bcf84e254727f22bca3a27394c9189281e4e5e4a06bf8
SSDEEP

1536:ym1CE2soWP0OIraggO6v/0DNHUYbLOyZeZjOffJxFwKW01uGR/xOi7OCLKMR80LL:ym1to/ao0M+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
994ef5ccb911d4d464de5cd364827980_NeikiAnalytics.exe

Files

994ef5ccb911d4d464de5cd364827980_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

d9c17f3313f3778eda1030d950b660ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\DmitryHELL\Documents\SysIQUA\loader_1.4 u2\loader_v4\loader_v3\Release\loader_v3.pdb

Imports

kernel32

WaitForSingleObject
CreateEventA
VirtualAlloc
CreateProcessA
CreateMutexA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
Sleep
GetLastError
ReleaseMutex
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
GetModuleFileNameA
GetProcAddress

advapi32

RegOpenKeyA
RegEnumValueA
GetUserNameA
LookupAccountNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ