89ed86113d6bb8a3cc9154f3ed16d470_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89ed86113d6bb8a3cc9154f3ed16d470_NeikiAnalytics.exe
Size

1016KB
MD5

89ed86113d6bb8a3cc9154f3ed16d470
SHA1

014f9bf44cb4d658fd8cdfdebcc88b40d79f63d2
SHA256

bc70d8db07f4d3e9979bfdf71f65116a922f480a467d2c1f83ee5250e9c57527
SHA512

7413adb37ad8b57fb3a501018732092f73b27b8d3839a9a086d9dfec971b187575b13607fd7c42969a9b2d34ed70bba67306922b79c4eec8eb98d777be113df0
SSDEEP

12288:Wh3ZukLF5fRY5a/6GX4D1DwhHd1zrwLof5e3glqu9s4uEpVz87Vk2DnsUl:WhMkxlRSaiPDi3+kfxpO77VkDUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89ed86113d6bb8a3cc9154f3ed16d470_NeikiAnalytics.exe

Files

89ed86113d6bb8a3cc9154f3ed16d470_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

8c8cd2fe8f466202b9cc82f6156dad3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ropf
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ