a4481497d6fee5a968ef11e14f934590_NeikiAnalytics[.]exe

General

Target

a4481497d6fee5a968ef11e14f934590_NeikiAnalytics.exe
Size

1.5MB
MD5

a4481497d6fee5a968ef11e14f934590
SHA1

2d847072815398da47bb2eba38eb88efda6e0e6c
SHA256

3bf5c42c8ca78dd3b43bee2656b4d14d1823ceafbc7ba134f252e349cd5bb6c8
SHA512

c748c4bd0c2b5804ad95d375be9a3e93859db5819a091b25bb244a12c57f71df11be5c149f7298d3eea3076cc519929f4c6fa6d92f3d3d87b3b7737a1b6f332d
SSDEEP

24576:IqbSoBdjUvOKhS8RyqqlqtELLWasCDdVauqjaZsrxHdoHlsgtzjeD19zc9P3nqH:TbjBdj9Khv5tlrCTa0ZsxHaHjtzjNnqH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4481497d6fee5a968ef11e14f934590_NeikiAnalytics.exe

Files

a4481497d6fee5a968ef11e14f934590_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

0f34cbf703ace134e0a8e1bf7e4bfb16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindClose
lstrlenA
GetModuleFileNameA
CreateDirectoryA
FormatMessageA
lstrcpyA
lstrcatA
FindNextFileA
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
Sleep
RemoveDirectoryA
ReadFile
WriteFile
GetEnvironmentVariableA
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
LCMapStringA
SetEndOfFile
LCMapStringW
GetProcAddress
SetEnvironmentVariableA
LoadLibraryA
GetACP
CompareStringW
GetOEMCP
CompareStringA
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
SetUnhandledExceptionFilter
WideCharToMultiByte
GetCPInfo
FreeEnvironmentStringsA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
CreateFileA
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar

user32

MessageBoxA
CreateDialogParamA
SendMessageA
LoadCursorA
ShowWindow
UpdateWindow
GetForegroundWindow
SetCursor
DestroyWindow
GetDlgItem
IsWindow
wsprintfA

comctl32

ord17

shell32

ShellExecuteExA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f34cbf703ace134e0a8e1bf7e4bfb16

Headers

File Characteristics

Imports

kernel32

user32

comctl32

shell32

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 146KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 146KB

.rsrc
Size: 16KB - Virtual size: 12KB