6084aa591674c2432d5e6a5ba50f2eb0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6084aa591674c2432d5e6a5ba50f2eb0_NeikiAnalytics.exe
Size

46KB
MD5

6084aa591674c2432d5e6a5ba50f2eb0
SHA1

f7613fc9e0b339b0ad968f9cd79fb7f8a0f055ec
SHA256

0777652f1a0d6fbf46490b8856cf3a3a14b71239ca0d6448c1e3786780ce7187
SHA512

81754251c96952f99c55727be1c92d7c0e114585d11fe39da08a8dea2ee598c4c137ef3d01c312ed47194812aeb96aed7ff236af7812aeb13f9a4def59a9a54e
SSDEEP

768:90h7Ziur3SvggggggLvggggggggUa3PXMmkGk0eY3+ebUk9AqgUyMVEgLYO:/urS3kmEKp5GvU4gJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6084aa591674c2432d5e6a5ba50f2eb0_NeikiAnalytics.exe

Files

6084aa591674c2432d5e6a5ba50f2eb0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

24ae095bcd89ea8f038fa2dcb5699fc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExW
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA

kernel32

GetStartupInfoA
lstrcpyA
GetModuleHandleA
GetCommandLineA
CloseHandle
CreateMutexA
LoadLibraryExA
CreateEventW

comctl32

ord17

shfolder

SHGetFolderPathA

shell32

SHGetMalloc
FindExecutableA
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDiskFreeSpaceA
ExtractIconA
DragQueryFileA
DragFinish
DragQueryPoint
SHGetFileInfoA
ShellAboutA

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ