065effeab68e6eb2d9212a2b024f89c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

065effeab68e6eb2d9212a2b024f89c0_NeikiAnalytics.exe
Size

50KB
MD5

065effeab68e6eb2d9212a2b024f89c0
SHA1

b5f472933e52a9d6d8b56da6e20bdcb3e430008d
SHA256

2a408f045c3de0e08ea6078c0422e0606d8ae92e87860f91e65f05359235c0e6
SHA512

26cee92ee3eb92ec7d4d4cfca8710ecdf6af1e23ee20217046397336fc0dd181c8611584bfccbfb8bc13df88ac8c712f4349903f694fa0095969d16af6660a44
SSDEEP

1536:q+vjNmnVojXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8LYD3DZFYilQNAgqUOb:q+vjNwVojXRrs9sINeZEtejlIkoLN12k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
065effeab68e6eb2d9212a2b024f89c0_NeikiAnalytics.exe

Files

065effeab68e6eb2d9212a2b024f89c0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

683692d4746aa100a2b6043db7fe5945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpyW
ReadFile
CreateFileW
HeapFree
CloseHandle
GetFileSize

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ