a7533fe4f7c1c4daafe937767b5fa850_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a7533fe4f7c1c4daafe937767b5fa850_NeikiAnalytics.exe
Size

62KB
MD5

a7533fe4f7c1c4daafe937767b5fa850
SHA1

53071afd551f2377f72b409979434027fff58122
SHA256

978f831e3ebb60e21da24e089c7d11833de1a778256bd2e5f503863c6562ed65
SHA512

d4489db9c8ec6ea5fc32dda6a31c6cad2bccd5bf9182b6b263cebe900771f7d7a75d0ae2031598619158aa09540fbbdd33008517a4c86c4d572fd3c811fb90cf
SSDEEP

1536:h2LvvcGJBixuW7dPjQlfSFIsO+aOKcLllWLM2:h2zcGJBibDJvMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7533fe4f7c1c4daafe937767b5fa850_NeikiAnalytics.exe

Files

a7533fe4f7c1c4daafe937767b5fa850_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

573066823f761f123ba4cc862787084a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DialogBoxParamA
EndDialog
GetClassWord
GetKeyboardLayout
SetClassLongW

imm32

ImmAssociateContext

userenv

ExpandEnvironmentStringsForUserA
GetGPOListA
FreeGPOListW
RefreshPolicy
GetAllUsersProfileDirectoryA
GetAppliedGPOListA
GetUserProfileDirectoryA
GetAppliedGPOListW
GetDefaultUserProfileDirectoryA
CreateEnvironmentBlock
UnregisterGPNotification

kernel32

InitializeCriticalSection
InterlockedDecrement
GetProcAddress
IsDebuggerPresent
FileTimeToDosDateTime
GetPriorityClass
AssignProcessToJobObject

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE