9f4e80e9a5f265914241fc327a73d3b0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f4e80e9a5f265914241fc327a73d3b0_NeikiAnalytics.exe
Size

51KB
MD5

9f4e80e9a5f265914241fc327a73d3b0
SHA1

b70e7603bd5c93d59cb92792be355d561eb3714c
SHA256

91aec8e1486664374c6e9b78ca569ce4f93a8c040c13922f227d9e607cff37be
SHA512

09a6ccf6fb0b9e744f81d254917e0b325b87189a443ce550f1f837992014ebb45ef88707eb9a156bfaaf0f4bff0726fc1adc077de59c8fe9dc2689967fe383f9
SSDEEP

768:373OtJDvhzNsyXk58sCuSw26eWp12hzORvmGpsmC2317dR7:3a/DvVNe58kSw2tw21ORvmgDx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f4e80e9a5f265914241fc327a73d3b0_NeikiAnalytics.exe

Files

9f4e80e9a5f265914241fc327a73d3b0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

bbc712c81dbe5f313d887223f25de84e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
RtlUnwind
DecodePointer
EncodePointer
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetSystemPowerStatus
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
OutputDebugStringW
SetLastError
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ