4c0277079d959d71a9ee60bf8a13de80_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

4c0277079d959d71a9ee60bf8a13de80_NeikiAnalytics.exe
Size

2.6MB
MD5

4c0277079d959d71a9ee60bf8a13de80
SHA1

85ead02fc968d6b65d8643083750e9381404d201
SHA256

2ce1904e3d31802d121af83800f5d22f01288045359e8464fee99b961bad93ea
SHA512

b2f72a40944e2a092a0b02b62980e043a43ca70ded8a1e226ce3828a2e1f92125f65530d6a80f1260091d84a7620cf3386eee8b8981a2e6780ff37796d1c71c2
SSDEEP

49152:lUjlYK/449J6SA22lTU+P7Fv+6Q+gMSPb77RgLaJ4WIEKKp7D0eN:Ulfb9mrlT1P5v+X+8z+LaJ4BEtVoeN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c0277079d959d71a9ee60bf8a13de80_NeikiAnalytics.exe

Files

4c0277079d959d71a9ee60bf8a13de80_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

e44d8197760d0a5abc943226e457fbf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rpcrt4

RpcServerListen

winspool.drv

OpenPrinterW

advapi32

QueryServiceStatus

ole32

CoRegisterMessageFilter

kernel32

WaitForSingleObjectEx
GetFileSize
GetModuleFileNameA
DeleteCriticalSection
GetBinaryTypeA
GetModuleHandleA

opengl32

glMap1f

winmm

waveInOpen

Exports

Exports

IhzpheuldS

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 84KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ