125a595b822b9a0b5225ee163a93f910_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

125a595b822b9a0b5225ee163a93f910_NeikiAnalytics.exe
Size

265KB
MD5

125a595b822b9a0b5225ee163a93f910
SHA1

d51b7f4d6718b2c71f229ba022c031a6cea19736
SHA256

05177dcc7c9c214591c856829eb2478a910e24e37b9298c5d0ba04137c45a444
SHA512

481225f747aa58fd308de565183665aa57238b04c7c6c6497d607c10ce32b75f7f254cb4c4c3c9e8af4da0a963aa27370e0b4a49f12a05ecb8b742e88889e5dd
SSDEEP

3072:Fn6TY8V94hY9frcMO/b1ERumhEVbV27OzoakJ4AqFj1MQZyiufTBf/L1kaDJD/+:FnYV9XfwMCdM4AqXMQ7ufTBHL/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
125a595b822b9a0b5225ee163a93f910_NeikiAnalytics.exe

Files

125a595b822b9a0b5225ee163a93f910_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnviarStream
GetChromePass
GetContactList
GetCurrentMSNSettings
GetMSNStatus
Mozilla3_5Password
SetMSNStatus
StartHttpProxy

Sections

CODE
Size: 215KB - Virtual size: 164.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 164.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 164.7MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 164.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 164.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 164.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ