3d6a74c606be8690b2da0bf5ff115790_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6a74c606be8690b2da0bf5ff115790_NeikiAnalytics.exe
Size

24KB
MD5

3d6a74c606be8690b2da0bf5ff115790
SHA1

b7e606e50089b92952a5c8a76dea7eff52734c98
SHA256

ecd56afe403da74437e821576e0323b65e659f55ba3a1b876576335b4f489368
SHA512

905f898a2cfbac28399e6fad93529a9909c10ee22522f275d85343131c1b09a8015a9ccb73c4681fc5199d814771e1673524777c5b4939ebb403bead8bf19fb9
SSDEEP

384:8Vk+jvDMaufCt7S6yDz6bv9MaqtjyAOUrFwo:Yhvo56M+7ESaFwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6a74c606be8690b2da0bf5ff115790_NeikiAnalytics.exe

Files

3d6a74c606be8690b2da0bf5ff115790_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

a7d9641cae2b361050f28d405c860eb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
FreeLibrary
GetProcAddress
LoadLibraryA
FindFirstFileA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
FindNextFileA
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ