776c49fd96494514d162730b209ebf70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

776c49fd96494514d162730b209ebf70_NeikiAnalytics.exe
Size

43KB
MD5

776c49fd96494514d162730b209ebf70
SHA1

d88432be5aea0de1f0169fe8e79012058b1d76a9
SHA256

b8f31775c34975f3a737be46f337bb147012465597b3dd722dc7facc4b50c4a2
SHA512

64c02f325bba6ffb4694ff060a7d56265e05fa7cf5efffc87c3fe2c4dbb96811e8bdfa19574f3702c15f969fafddac33f1a086efde63db20cf4736d67320b062
SSDEEP

768:om05k4mjNmntC2ojHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oqt+D3D/jbTR:q+vjNmnVojXRrs9sINeZEtejlIkoLN1f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
776c49fd96494514d162730b209ebf70_NeikiAnalytics.exe

Files

776c49fd96494514d162730b209ebf70_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

683692d4746aa100a2b6043db7fe5945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpyW
ReadFile
CreateFileW
HeapFree
CloseHandle
GetFileSize

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ