1c6f82495405752fc879856bc1384410_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c6f82495405752fc879856bc1384410_NeikiAnalytics.exe
Size

6KB
MD5

1c6f82495405752fc879856bc1384410
SHA1

46656612bf258a2a794fe02adf51574eb8214d68
SHA256

0748d21a112d7fc3344ac044bdda682cb040bb363f7c5559bf2955a3a2ee25f2
SHA512

039cbbc930c24e0e030b28bd5c52a3e89561804e4932fdcffc8fd5243870c74de1a2a7cd4ce8e97d5b39822034828325b5500d9686455a9ee2394a06f9ec2499
SSDEEP

24:etGSl2+Xi619yMK4z7GOiOwr+OWr/+/dnMolwkXnjsoEg5CY0QkAUwJCoEgcYx5+:6w+B9yhYdwS/wlnR+qBJqCoHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c6f82495405752fc879856bc1384410_NeikiAnalytics.exe

Files

1c6f82495405752fc879856bc1384410_NeikiAnalytics.exe
.dll windows:1 windows x86 arch:x86

e8fdbc8524ad2498b295b2a16a4e8575

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
RtlUnwind
RtlZeroMemory
SetCurrentDirectoryA

user32

SetClassLongA
LoadCursorA

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
strcpy

Exports

Exports

DLLEntryPoint
mousepointer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 588B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 824B - Virtual size: 824B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 108B - Virtual size: 108B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ