b97a63618fe18bfa4b990a6afbbef0b0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97a63618fe18bfa4b990a6afbbef0b0_NeikiAnalytics.exe
Size

3KB
MD5

b97a63618fe18bfa4b990a6afbbef0b0
SHA1

74b218a1ecdb728312ac8124718546939c21d91d
SHA256

d50520bfb18866a9ce0a80758f21bb85e9f1fb00e76170153f3cdd691262db05
SHA512

4e861c03d46bfcd2732a76351c1e09a12270b6cdcecbb5ead29c458367224f0f469fe660c70d34ecbb3d4adb1893b247b9bc0cc30ac9c8d012c40bdc6105b5c2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97a63618fe18bfa4b990a6afbbef0b0_NeikiAnalytics.exe

Files

b97a63618fe18bfa4b990a6afbbef0b0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 975B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ