05d1629d08942cf2046b6db28b946cb0_NeikiAnalytics[.]exe

General

Target

05d1629d08942cf2046b6db28b946cb0_NeikiAnalytics.exe
Size

137KB
MD5

05d1629d08942cf2046b6db28b946cb0
SHA1

f90e05b0a33d14596d81c7753962e9903c1e7f66
SHA256

a3b736e39a2415649ee35be3a2e82ce1b16a8479e7134e3dcc8c68550ebe7bce
SHA512

a13ac4a12f3b4ce3c5df87f629443c781106e9abb155ffd1259836574ba43b7d5967e6e1e3cff80e39fad77894f70dc5471f4930e385385b85112da6eab1cd2d
SSDEEP

3072:N/eOrj+K1j+stAo7jpD73KvTYEIQkeJ9v:VBlAQd3eCQTJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d1629d08942cf2046b6db28b946cb0_NeikiAnalytics.exe

Files

05d1629d08942cf2046b6db28b946cb0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

406e9620195118da1a72280c65e8babe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
LoadLibraryA
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcpyA
lstrlenA

shell32

SHGetFolderPathW

user32

GetDC
GetDlgItem
GetSysColor
GetWindowLongA
GetWindowRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
RegisterClassW
SendMessageA
SetWindowLongA
ShowWindow
MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

gdi32

SelectObject

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

406e9620195118da1a72280c65e8babe

Headers

File Characteristics

Imports

kernel32

shell32

user32

advapi32

gdi32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 113KB - Virtual size: 359KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 632B

.reloc Size: 512B - Virtual size: 376B

.htext Size: 8KB - Virtual size: 8KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 113KB - Virtual size: 359KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 632B

.reloc
Size: 512B - Virtual size: 376B

.htext
Size: 8KB - Virtual size: 8KB