19f1b7cfa309f5a32e7a89541ce72650_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

19f1b7cfa309f5a32e7a89541ce72650_NeikiAnalytics.exe
Size

35KB
MD5

19f1b7cfa309f5a32e7a89541ce72650
SHA1

91e11ad76b25db2a9bf6145159b22363aeae3faf
SHA256

319d69a37f7be3641200e14fd0b48536acc548abd3246b2b47c6686e333d7252
SHA512

91670d38dda543ed29da3eb857acb9d9d2bafcbbefd7aec267109a5100d50bb41c5edd94d8f10084a8784bd9e3cf2e00766abced7ed7267afed2462af32d8d58
SSDEEP

768:UxYExEHgZcYDTH/Bw0Ql/poyxseLsTGvEX0e5v7lT:QwHgp//Bw04/pomsbG4vp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19f1b7cfa309f5a32e7a89541ce72650_NeikiAnalytics.exe

Files

19f1b7cfa309f5a32e7a89541ce72650_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

b19919e944c8d5653841bb3ae375f86b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ctfmon.pdb

Imports

kernel32

RegisterApplicationRestart
GetModuleHandleW
GetCommandLineW
GetStartupInfoW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs

msctfmonitor

DoMsCtfMonitor

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eyqfeos
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE