580315ca5510d2a9e090fef7893a94d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

580315ca5510d2a9e090fef7893a94d0_NeikiAnalytics.exe
Size

265KB
MD5

580315ca5510d2a9e090fef7893a94d0
SHA1

576cca7b017a2f1e41e3888763f2ce86c1708a4b
SHA256

bebedd16b452a96d03e38ac4ac6c1f5ba369b9990e32f77ded76e1b5c48f9600
SHA512

51ae5416866d701beed1bb1747d236c822fa14f0c003399101dadc7bdfe769a869fcac00ef556727bb703edd48c89b70add005b36cc1225b5ef0ec6a08516f16
SSDEEP

3072:x/nmZ9MI5FttciXroM/SzDxEtvSPuRMRLZaHCj0WGnpW9NV6VBc7BZbNVgq1Sff8:x/nwFt6iXUMWpwmNV6Vu7b053TBZ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
580315ca5510d2a9e090fef7893a94d0_NeikiAnalytics.exe

Files

580315ca5510d2a9e090fef7893a94d0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnviarStream
GetChromePass
GetContactList
GetCurrentMSNSettings
GetMSNStatus
Mozilla3_5Password
SetMSNStatus
StartHttpProxy

Sections

CODE
Size: 215KB - Virtual size: 130.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 130.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 130.6MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 130.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 130.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 130.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 130.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ