41151518803aab778fcbb7120c8e94a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41151518803aab778fcbb7120c8e94a0_NeikiAnalytics.exe
Size

48KB
MD5

41151518803aab778fcbb7120c8e94a0
SHA1

b1719aa5c06ec981a73876239a5608c98032d05d
SHA256

ee8049824e5588b3aef60d5f7c8731ed9879bb3c481969bcc6a6b5c0f60e5bf5
SHA512

d10618aedf440b5f0b23f41cc82f3594ad781f47b3a2a05fb878f2ab98e0d2d5d77ca240a38e1ea047e36b48c1e676b2a8e68c7e070198558a3d6179faf8c2be
SSDEEP

768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6Cda2gIlhD:dCoVXGRTuhBxj/hY3CV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41151518803aab778fcbb7120c8e94a0_NeikiAnalytics.exe

Files

41151518803aab778fcbb7120c8e94a0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ