6b98ee8ce1fa5adc04c16825e921bd20_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b98ee8ce1fa5adc04c16825e921bd20_NeikiAnalytics.exe
Size

51KB
MD5

6b98ee8ce1fa5adc04c16825e921bd20
SHA1

f1824aec0edb056064fd257da9d0fb2532ce9a6d
SHA256

84b2c84387151239d7cc215b2e33392c312ece2fc171b9dcf6ba1a98c788d1ed
SHA512

17e2f885df98d71b4d7c856187f0d6f62332ec5ce94e1991ae44de5b7c07c849b2556d48b0df8992e3c8bd2a2db72989a30b6c7466ccfd805f958c524284e754
SSDEEP

768:SWTNyMhhvcgNWQBG1Ee/Mg1mNN8H7jw78qoEA4rEt4vdZg0X:SWTXhh0gNfw1Eez1mWjw7BoLFr0X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b98ee8ce1fa5adc04c16825e921bd20_NeikiAnalytics.exe

Files

6b98ee8ce1fa5adc04c16825e921bd20_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

1767080617bf8443c0422165e2b8ce4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetLastActivePopup
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
CreateWindowExA
LoadIconA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
WriteFile
ExitProcess
GetFileSize
CloseHandle
GetTickCount
GetEnvironmentStringsA
lstrcatA
lstrcpyA
GetModuleHandleA
LoadLibraryA
GetTempPathW
GetProcessHeap
CreateFileW
GetLocalTime
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

comctl32

InitCommonControlsEx

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ