503a852677d504b35a232f9f3debea80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

503a852677d504b35a232f9f3debea80_NeikiAnalytics.exe
Size

25KB
MD5

503a852677d504b35a232f9f3debea80
SHA1

f0dc66712a5cebc673f0de367cdabfc8976946af
SHA256

511568673eb478ff3f4449080b08af3e5179a80c7e3c88ac31045b6c5e538e48
SHA512

3a7cc986a61ee225e673e81ef692b0a322b677d5ed9fe525330b488dd7c452a7ca5d599eec6d2860d06e71807e52a04808385115a9290e3b60ae6b7a4aec479a
SSDEEP

384:+7ZfapsmVHgRK/rJ1OetA8gA49lBrenVyG+txHBtNsmSJJEFkZY8:OpgTARK/rRggVGhBRAEyZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
503a852677d504b35a232f9f3debea80_NeikiAnalytics.exe

Files

503a852677d504b35a232f9f3debea80_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

5bdbfadc30986867f14f8da3f77b42ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
MessageBoxW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetFileSize
CreateFileW
CloseHandle

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ