156fa1eac42597a4e48d66a012620570_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156fa1eac42597a4e48d66a012620570_NeikiAnalytics.exe
Size

34KB
MD5

156fa1eac42597a4e48d66a012620570
SHA1

9eec385679757e4d0032fd9731693c2bd4013ddb
SHA256

46e97f1b29c5f4273c792e23176d5c52e18a6cd55de4bd95256c282043271d3b
SHA512

0829550a7195bb75c3cd2cd097228b07b8016a4ea5a613664815d5ddc806c6a59a8c8823b389aac68befe178e987099457c22f2cff205dfbad45c8160fa5d96f
SSDEEP

384:gtyC4ImZbzhjmu6ewdtTACTAyM13vfdHldhwLGEGy+OGa0k:gN4HMr7XAAAyM13vfdHldhwyE7+OGa0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
156fa1eac42597a4e48d66a012620570_NeikiAnalytics.exe

Files

156fa1eac42597a4e48d66a012620570_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

9a13fc92a634418770f4678ed35ff83f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
SizeofResource
lstrlenW
LockResource
LoadResource
GetModuleHandleA
GetCommandLineA
FindResourceA
VirtualFree
ExitProcess

user32

GetDC
GetSystemMetrics
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
ReleaseDC
SendMessageA
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
GetMessageA

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
BitBlt

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 986B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ