8301f55c7d91b20bc6f64589afa5ff40_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

8301f55c7d91b20bc6f64589afa5ff40_NeikiAnalytics.exe
Size

7KB
MD5

8301f55c7d91b20bc6f64589afa5ff40
SHA1

101450d9563199da14e127768e6dc48ea678f601
SHA256

ce3f8f812ff09b4a8455c7d42e6d0737adbc67eef48d90db2739fa0ec8df2752
SHA512

ead3b6ab214be2bc61c5d7893630d60481c9a368ad59937d4e08b99f0ade56b39dd92627037519336c8af16a69507726f85899f099ec8f603d4497decd48b9ea
SSDEEP

96:Fk8LuAx2WmE36e07v03GJsBo+cw5WpbusetJI2iBt+OmZe91D:FkFC+E3S4C4RhOmZeb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8301f55c7d91b20bc6f64589afa5ff40_NeikiAnalytics.exe

Files

8301f55c7d91b20bc6f64589afa5ff40_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

a330ab4571994ddebf91be7a95f5c0d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
GetTickCount
Sleep
CloseHandle
CreateThread
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA
CompareStringA
InterlockedExchange
RaiseException
FreeLibrary
LoadLibraryA
GetLastError
LocalAlloc
GetProcAddress

user32

wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset

Exports

Exports

winampGetInModule2

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ