0994c3397d99ef65b464937165ab34b0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0994c3397d99ef65b464937165ab34b0_NeikiAnalytics.exe
Size

27KB
MD5

0994c3397d99ef65b464937165ab34b0
SHA1

738fca8fa31f5064fc590428c687ac5d955ac955
SHA256

b71f91e925d2d94305ec97e04705720887f795bdfdd861ac4bd05ce99b6ffbe9
SHA512

633bb3f0e6540e9268de28bff21d3a2fbef585c31dc96a128eb69c960f1e2859146301cccae5ad76a785512549d83525389b60e7db6bde948c8772981881e361
SSDEEP

768:b5bMMMMYwbO4VsyYuNdWQGLcM3+/qkV9VKblxQta/cVC4l:FbMMMMYNHMKcM3+pHwXEa61l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0994c3397d99ef65b464937165ab34b0_NeikiAnalytics.exe

Files

0994c3397d99ef65b464937165ab34b0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

d05cae88b858026b75798bae714db456

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ProcessIdToSessionId
RtlCaptureStackBackTrace
Beep
GetProfileIntW
GetCalendarInfoW
lstrcmp
SetConsoleCursorPosition
QueryMemoryResourceNotification
LZClose
SetConsoleWindowInfo
RegisterWowExec

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE