1d554d00cea464e1fd3c2d8cccad2640_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1d554d00cea464e1fd3c2d8cccad2640_NeikiAnalytics.exe
Size

29KB
MD5

1d554d00cea464e1fd3c2d8cccad2640
SHA1

e3666d58f147d3011074924508c0471b34cac99c
SHA256

c64dbda9ab9d109df837befe993e0c449e75baf2e521fa8b91c7a8586f4aad2a
SHA512

08f139ce44043019e485e14f9fa80568550c8c5454d885f6bb57989583f3200bbeed9c897210a014885dffa1ab12ce93e6281873d50bcab0d20c693a6a454ef0
SSDEEP

384:O/HTfut04H5wakydVf/4xQ8uFvTtk4Fe3baIYdh7hEvK76uyWYOvFxLYtt:O/zcJ5Pf/r8urkp3bxHv+6rSvrLwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d554d00cea464e1fd3c2d8cccad2640_NeikiAnalytics.exe

Files

1d554d00cea464e1fd3c2d8cccad2640_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1e84ffa21ab885469d86810171c6502a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvidctl

GetProxyDllInfo

ole32

StgOpenStorage

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ