2a5588f4927a22860a26679ca88d0000_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

2a5588f4927a22860a26679ca88d0000_NeikiAnalytics.exe
Size

24KB
MD5

2a5588f4927a22860a26679ca88d0000
SHA1

9e168bb8947458d8f1a75f71d13b2f5e58d6893a
SHA256

944b665460a5da0de4dbc87d7ad6f72d1d72045a938c2fbba3b8b68024606f33
SHA512

39d8d2e2cbd3a9cfbaadbd64e2e4f16a30803543a40dff024efc006213eda3c07c86410c3ef33419075801852eb066be680f6125673440c8a104030a1bcf5508
SSDEEP

384:N9NvWo7Wf6zACdyBHL3z2by9eaXynzJremoZ:NDvWoSf6jc59XClemo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a5588f4927a22860a26679ca88d0000_NeikiAnalytics.exe

Files

2a5588f4927a22860a26679ca88d0000_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

6733cc7b6c6292935ab43c97e97a51cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ptp1588v2lib

set_g_ptp1588doIt
setSlaveOnly
setProcID
setInterfaceCfgMode
setProjectCfgFilePath
setSetTimeCallback
setMessageCallback
ptp_init
ptp_loop
ptp_uninit

kernel32

GetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetLastError
SetConsoleCtrlHandler
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE