3903629b1aec61ae07b6cbbe1972f970_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3903629b1aec61ae07b6cbbe1972f970_NeikiAnalytics.exe
Size

6KB
MD5

3903629b1aec61ae07b6cbbe1972f970
SHA1

11a9dfa7f63345367af1767f87285d1cb8b32fef
SHA256

cf0c1fef680170d9cc2f945d8a6172657aebdf43ad29f44bcecf9b22685e4616
SHA512

f97b8f4de029cb1c93e2895009a1af57ec066a53a36cb3b7653fe19e9d1defadea938422d3056a161bd711ed640e65eea04d80e96b1b225fc60b494d3373509a
SSDEEP

48:KwVaNxPn9Fz3ASoBjgt/vOUHRffUL+CcC5rAlNGyKM1PkT/Qt8CUjPLkiE:5wxP99AH1gteUdKlcOqZKJQ4P1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3903629b1aec61ae07b6cbbe1972f970_NeikiAnalytics.exe

Files

3903629b1aec61ae07b6cbbe1972f970_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ