73f5b048ea3d64cb2eb1ce209e73db10_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73f5b048ea3d64cb2eb1ce209e73db10_NeikiAnalytics.exe
Size

34KB
MD5

73f5b048ea3d64cb2eb1ce209e73db10
SHA1

f9a215d7d4ad42fd69a82eb088a73a52434e518d
SHA256

9f1cc5f761e85e3c8a9892998102b9ba9f79dd80eee2409d732e9b08354a9fb5
SHA512

90428a580eea04a5adc576e52c47de7578fde67ac0d3b982e10bd2658c4058c423612ec4299f311e800160f690c2fd901b520e3754bd69dfb5748211555c1774
SSDEEP

768:hH8IFhhRegVoE4junJDBiAsaHXyJtHEE8PojSyMubB9g7r:hcIFhhReGS6DB9saHDP4SyMubB9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73f5b048ea3d64cb2eb1ce209e73db10_NeikiAnalytics.exe

Files

73f5b048ea3d64cb2eb1ce209e73db10_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

9b4db9d3b9ccad0d70f1b7c24f559950

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit

kernel32

WaitForSingleObject
lstrcpyW
CompareStringW
CreateProcessW
CloseHandle
ExitProcess
lstrlenW
lstrcpynW
GetModuleHandleA
GlobalAlloc
GlobalLock
LocalAlloc
GetThreadLocale
GlobalUnlock
GlobalFree
LocalFree
GetCommandLineW
GetSystemWindowsDirectoryW

user32

LoadStringW
wsprintfW
MessageBoxW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE