339bd6e0edf7cad39f838b26cc3d4740_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

339bd6e0edf7cad39f838b26cc3d4740_NeikiAnalytics.exe
Size

54KB
MD5

339bd6e0edf7cad39f838b26cc3d4740
SHA1

8f03f4fc0a4a75ec37b33f8fcfcbe13d2d0040b4
SHA256

a88b9c9c11685a6566492626245e09abc709d7ffa9ce2ae3ec20c1db1449e669
SHA512

828d99268a31937a3db38a128fc9b27cab7b4cbc509eb12280a1f76a232604a6c657ea9d37e43c7857ac2a859c06bd319aa13125c5df324aa024bbec2f5bc07a
SSDEEP

768:/8sJAnZCQBwuUuequfoWfslluMgsk1Glwh4uO0j3iJ:/8sMnlequfoWfsysvwh4uO0GJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
339bd6e0edf7cad39f838b26cc3d4740_NeikiAnalytics.exe

Files

339bd6e0edf7cad39f838b26cc3d4740_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

bebb09386a571afa0122abf9bbfc7d32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
GetMessageW
TranslateMessage
DispatchMessageA
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
GetQueueStatus

kernel32

HeapAlloc
GetStartupInfoA
GetProcessHeap
GetModuleHandleA
HeapFree
CreateFileW
ReadFile

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit
_XcptFilter
__p__acmdln

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ