a3de5eab356084b9e9e505a36f970050_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3de5eab356084b9e9e505a36f970050_NeikiAnalytics.exe
Size

617KB
MD5

a3de5eab356084b9e9e505a36f970050
SHA1

37d9eba2c3c1d924ccb0d56ee69df49da30a4cff
SHA256

148ef534ac661142a230c9a86020f56ecb9e233cf727b05d2aca4d5bdd22ecd4
SHA512

36bcb034d215d14b674bad52e9491b8490ea921e5a661e32f5d9877032bbc7ae5b418359c025afc3947bd40544212ecc70576c697aa49c2d341e8668bcca8c91
SSDEEP

12288:ftB7yNgD83m3fE92TqC25sPPyDcNoATXX6wtzeGej9o:rNo3mM92TysPpXmMco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3de5eab356084b9e9e505a36f970050_NeikiAnalytics.exe

Files

a3de5eab356084b9e9e505a36f970050_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

b40c457657c59e9d515f1130618a2f1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileA
GetTickCount
GetModuleHandleA
GetCommandLineA
GetProcAddress
GetStartupInfoA
ExitProcess

user32

GetSystemMetrics
LoadBitmapA
GetMessageA
LoadIconA
LoadMenuA
PostQuitMessage
RegisterClassExA
ReleaseDC
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
LoadIconW
GetDC
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
LoadCursorA

gdi32

SelectObject
DeleteDC
CreateCompatibleDC
BitBlt

advapi32

RegOpenKeyA

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ