543c8d5c3ab226173e0b38377bb2be70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

543c8d5c3ab226173e0b38377bb2be70_NeikiAnalytics.exe
Size

24KB
MD5

543c8d5c3ab226173e0b38377bb2be70
SHA1

75d9cc9c50ccef2256b0828f785c325941484397
SHA256

4c092fbea572eb0f3b9ed4596289187f149d4ca1121687492fa52c652d15dcde
SHA512

aa8cb05a8475d7ba1244229540093f0073d4648b446aeea4034473a67fe9eb05b2425665c6877e186c1d37ef853e2040c532c6ca605d5538a9c8a7d57c99c1e1
SSDEEP

384:XKaUKfzBk6z/aljy5UmUBY5YQiGW7NpgHZDcif3ldznRTRvgMDU+MY+5omm8G:aaUANkQsjcVn5XW77ZI3ldT711sov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
543c8d5c3ab226173e0b38377bb2be70_NeikiAnalytics.exe

Files

543c8d5c3ab226173e0b38377bb2be70_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ