0999a155a826aad2e0af7373aed85b40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0999a155a826aad2e0af7373aed85b40_NeikiAnalytics.exe
Size

2.6MB
MD5

0999a155a826aad2e0af7373aed85b40
SHA1

1493a48a5c07b7abe7714141f5bf53938023c224
SHA256

3c235b24e86618cc8e28266aded5a7376b89019a65474ecdfc8abeb75a77d139
SHA512

934ab081c35bfe8436f9cce1bf71190bb670a4f2e032ab9a875a50979154e6f7abda5b1bf5f0fa9d43b04036d5da8ade08c118be2814c9d0a5032862d60222c3
SSDEEP

49152:hUjlYK/449J6SA22lTU+P7Fv+6Q+gMSPb77RgLaJ4WIEKKp7D0e:olfb9mrlT1P5v+X+8z+LaJ4BEtVoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0999a155a826aad2e0af7373aed85b40_NeikiAnalytics.exe

Files

0999a155a826aad2e0af7373aed85b40_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

e44d8197760d0a5abc943226e457fbf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rpcrt4

RpcServerListen

winspool.drv

OpenPrinterW

advapi32

QueryServiceStatus

ole32

CoRegisterMessageFilter

kernel32

WaitForSingleObjectEx
GetFileSize
GetModuleFileNameA
DeleteCriticalSection
GetBinaryTypeA
GetModuleHandleA

opengl32

glMap1f

winmm

waveInOpen

Exports

Exports

IhzpheuldS

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 84KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ