9c513d82421dc37247fbd3c0521ee160_NeikiAnalytics[.]exe

General

Target

9c513d82421dc37247fbd3c0521ee160_NeikiAnalytics.exe
Size

340KB
MD5

9c513d82421dc37247fbd3c0521ee160
SHA1

74cdb70843d323e6386b2aabc2c9196349ec51eb
SHA256

2449c2658240f42b5291ea67ced39fde794df7f6d240ffbc0cbebcd94d5ef04c
SHA512

c765831a75d7b9c73738ef048ca8061568be8205dd304f1aecd1dbe3aa2dc7d24778bd7a4343c154337abc2be2cbce75b2ef3040ea339103d11ae0f4291dfa75
SSDEEP

3072:dHpZAHwo8soECAKzAdHs2qxnCtnTF7d0CdyAfalUVn1/6D8CB+RTh2k:XKVoNAKs9ltbdyPUVn1/PRN2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c513d82421dc37247fbd3c0521ee160_NeikiAnalytics.exe

Files

9c513d82421dc37247fbd3c0521ee160_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

63dc0951e0254bc45aca7bf8114629a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumLanguageGroupLocalesA
OpenJobObjectW
SetLocalPrimaryComputerNameW
SetFileShortNameW
_hwrite
SetConsoleCtrlHandler
InterlockedPopEntrySList
Heap32Next
DuplicateHandle
GetShortPathNameA
DeleteTimerQueue

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxejodg
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rqvmxkb
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gumrkvc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kakxcjb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

63dc0951e0254bc45aca7bf8114629a1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 44KB - Virtual size: 41KB

.brdata Size: 112KB - Virtual size: 112KB

qxejodg Size: 32KB - Virtual size: 32KB

rqvmxkb Size: 32KB - Virtual size: 32KB

gumrkvc Size: 32KB - Virtual size: 32KB

kakxcjb Size: 4KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 44KB - Virtual size: 41KB

.brdata
Size: 112KB - Virtual size: 112KB

qxejodg
Size: 32KB - Virtual size: 32KB

rqvmxkb
Size: 32KB - Virtual size: 32KB

gumrkvc
Size: 32KB - Virtual size: 32KB

kakxcjb
Size: 4KB - Virtual size: 4KB