0115c6d204ed4e3fbe0e36920e92a350_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0115c6d204ed4e3fbe0e36920e92a350_NeikiAnalytics.exe
Size

21KB
MD5

0115c6d204ed4e3fbe0e36920e92a350
SHA1

fec6795f28dca62230ea5310b4cdc004927f0249
SHA256

9e6acce1a1a9b7dabe60f3b4079d9fcc85db4afddc07caa3fd8ef5550a4faaa1
SHA512

4a4de10ca44c0db448f7e41dcaa2a45950de3fc1095d155a70c5b65ec77713f789f1e5b532524353236296a370d734930fad3fc5c2beb679b5c5e1cc8904747d
SSDEEP

192:UHkr4ITvY5e+Drpcyr+o7wHF+ADmXQAvg9X5zIl3y+GxRRkDQvIEf9szNM:UzITvSruyioUHFMvezASHRkDQ5f9sm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0115c6d204ed4e3fbe0e36920e92a350_NeikiAnalytics.exe

Files

0115c6d204ed4e3fbe0e36920e92a350_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ