080af09f800a5fc06bd9b51b22bf7b10_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

080af09f800a5fc06bd9b51b22bf7b10_NeikiAnalytics.exe
Size

23KB
MD5

080af09f800a5fc06bd9b51b22bf7b10
SHA1

e7b7d63dfce40674c9028b17cebcd625f8510845
SHA256

3ae54e6e62a7bd8ab8470c9b0c2f557d3224b4e5032cb43bcdb5d1f0a15c0800
SHA512

4ef1908664f9f034630db928cc7f261211a4b0eaed871b85adc693517640851e75c4275cb4b395262e78e728b08f1b728a77d7a71c8a1f32adbd102db12517a0
SSDEEP

192:qytgAeuB2S7FFWlSkABcI+EWL/hTUozHLYDo2SIcIn8/wKUpwZNWj4mNWkMqLUTy:qySFpcI5pTUo7L2FSmnmwKAw2kkMW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080af09f800a5fc06bd9b51b22bf7b10_NeikiAnalytics.exe

Files

080af09f800a5fc06bd9b51b22bf7b10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

72c716384ea0a2091fb58c5c9a356b6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
lstrcatA
CloseHandle
HeapCreate
GetModuleHandleA
HeapAlloc
GetProcessHeap
LoadLibraryA

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ