04f9226bd977d9bbf015f05cfa818b80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04f9226bd977d9bbf015f05cfa818b80_NeikiAnalytics.exe
Size

2.9MB
MD5

04f9226bd977d9bbf015f05cfa818b80
SHA1

562de48d43e98b79a03930e32115bffe901f5e87
SHA256

37455a608bf2c3f263cd27c9f3ca8a54ded5671496091a315a3c1902ae2ccbbd
SHA512

ba1c8b18b861d8a3ee2e35f85e0439afb397eb76e99a318492f3e7835caa857f76bfb578a9376412ce043f47fed953438a19d43998e732c8587484cbbc5559d8
SSDEEP

49152:cE5nXw4AxOaMMCK2pwbFqN7CxwiM90yhSLeHRTtEImrLov6URZ6JLwAfo0MpqdoE:rXw48O3Mf2GYpCx6hSKTtEtvuZ6Do0MU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f9226bd977d9bbf015f05cfa818b80_NeikiAnalytics.exe

Files

04f9226bd977d9bbf015f05cfa818b80_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

2bd3390d5feba0062b4fbb170dd4b2a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile

user32

GetMenuItemCount

gdi32

SelectClipRgn

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.8MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ