323e44e9e3408485bd94ed2c9e342300_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

323e44e9e3408485bd94ed2c9e342300_NeikiAnalytics.exe
Size

29KB
MD5

323e44e9e3408485bd94ed2c9e342300
SHA1

12cb780a1c45b440723b7bd032f898929120f1c1
SHA256

2300bcc68e72247470f953e84d7c333730503e668ef42d09bef527e8c00b5ed1
SHA512

2f80585a0fb2b37f76f1963bf2f5600883464fd6e367b8918ba565da0781fe1e5f8b4961466ba6b614ea6b36ecc9747ffa93d415705a30761fc166a033f1087c
SSDEEP

384:O/HTfut04H5wakydVf/4xQ8uFvTtk4Fe3baIYdh7hEvK76uyWYOvFxLY2:O/zcJ5Pf/r8urkp3bxHv+6rSvrLd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
323e44e9e3408485bd94ed2c9e342300_NeikiAnalytics.exe

Files

323e44e9e3408485bd94ed2c9e342300_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1e84ffa21ab885469d86810171c6502a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvidctl

GetProxyDllInfo

ole32

StgOpenStorage

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ