909107d745abaea388ac328b0f92e3d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

909107d745abaea388ac328b0f92e3d0_NeikiAnalytics.exe
Size

5KB
MD5

909107d745abaea388ac328b0f92e3d0
SHA1

a26c7a3b0d7476d44ea62ae7de159bc8967d919c
SHA256

209387928272aac8a8c803d7efc89e74593b6c1292b7cb2d3ba061eaf6854871
SHA512

5d2b1a8843195bca6a78514425a3c2d60f8c02fa2b47321ae3fc7b160c46650d6431574093005423436ecc3f8ca2a060f19e7f527d656f86f60b2d6a472cb20f
SSDEEP

48:6hecFbLUTctoGevLHmCyYymx+pRNptUzEVnQBG/RACalGUF2CS7DD:QUYtevLGayFpXptwAnQWRRUF2CqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
909107d745abaea388ac328b0f92e3d0_NeikiAnalytics.exe

Files

909107d745abaea388ac328b0f92e3d0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

b1decad0f067131fff2e76ab43787f60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

ReadFile
SleepEx
GetCurrentDirectoryW
HeapFree
FreeLibrary
GetProcAddress
GetModuleHandleW
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
CreateFileW
GetFileSize
lstrlenW
ExitProcess
DeleteFileW
lstrcmpW
WriteFile
CloseHandle
LoadLibraryW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ