3fa30bf07baa5e0dcb7a0d15ece2a770_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fa30bf07baa5e0dcb7a0d15ece2a770_NeikiAnalytics.exe
Size

5KB
MD5

3fa30bf07baa5e0dcb7a0d15ece2a770
SHA1

c5aff3b28030c45fc58a35b6b7dd3a53488ab175
SHA256

8f6acc1ab2772bf93cf74ca4d2263ead2ec6294342262854ec7133e9deeb6248
SHA512

b340fad4e87b3b3cfe681f284f0074a3037e2e45e6ee7592c1205650896f45f788bb33c549a8ff09cd268e760a8ee560c5d0e7b5bd821cf4ac92302cbbe978b6
SSDEEP

48:qaTk5ZAmcRB/G9mfPBTBQS+l1rsHB/VnC/RAxUd2CS70ALNx:9oCBL33BTBQS+luHnnwR2Ud2ClAhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fa30bf07baa5e0dcb7a0d15ece2a770_NeikiAnalytics.exe

Files

3fa30bf07baa5e0dcb7a0d15ece2a770_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ