44a987d474409c971f689512fd100b10_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a987d474409c971f689512fd100b10_NeikiAnalytics.exe
Size

75KB
MD5

44a987d474409c971f689512fd100b10
SHA1

6692935a145141cc8cb0d2e622182d39f78b4023
SHA256

8b73863ca63cb737959f69b5e35d4ccc0aeae9303a8f28f6f79616a3f28c3f99
SHA512

65f9e2092498d9c945f21ef6a21ef753fb17a0d858d08e496c5e7e8027fd78d642c62a569b515e3c6b1bf8725e05f618294dbaf59c889e378256b79f74fce2f7
SSDEEP

1536:1cbNMI05ZPS2u30T8m99zfC5dhPIBUCwJLN9SZui1ZOmJXx:WMIqu30T8mf+P+UCwJB9Sh1ZOyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44a987d474409c971f689512fd100b10_NeikiAnalytics.exe

Files

44a987d474409c971f689512fd100b10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE