2b632f1d42b56d1553d352f41bd99660_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b632f1d42b56d1553d352f41bd99660_NeikiAnalytics.exe
Size

4KB
MD5

2b632f1d42b56d1553d352f41bd99660
SHA1

eb8087110a13af8e6ab17930d2a6ff8384dcd4e3
SHA256

b594b61934777d227e5a8816e9a5a42e6cfbcabd94f723d00486749e03061329
SHA512

317725f9dac4ac84ce78695baca8d37db45a0b7140033a97519d4252102d7ac9a85c61580feebe88fd6d43bdae2c3a4c04af39f1893aecca0f1a035e6fa1bef5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b632f1d42b56d1553d352f41bd99660_NeikiAnalytics.exe

Files

2b632f1d42b56d1553d352f41bd99660_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

e3dd4c5592a27e52ef31907613f7c24c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SendMessageA
FindWindowA

kernel32

DeleteFileA
CopyFileA
GetSystemDirectoryA
_lopen
lstrcatA
WinExec
lstrlenA
_lclose
lstrcpyA

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyA

ole32

StringFromCLSID
CoCreateGuid

Exports

Exports

DelProc

Sections

.text
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ