5de9e442dc9cf6783045f5beeb7c88b0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5de9e442dc9cf6783045f5beeb7c88b0_NeikiAnalytics.exe
Size

921KB
MD5

5de9e442dc9cf6783045f5beeb7c88b0
SHA1

e4bd600e4ff84744873dbe19dca6c1317852c420
SHA256

636fdbc8367d3f60ebd07df74e84b60df835dfd15a90cea7608794f982e92fbb
SHA512

cc8e441443cb11bd3b2bfbe75995899ba07c7e6f7ec4d5bb7e5a6fa1f5027c5acc28f1458db996c1e9763f4e124ec61d40e4508554874465aaccd5be48ad40ed
SSDEEP

12288:nSbbRWutBQwaqdXiXi/cI0dG508RUi5tiE5IDAVRAdFmExWGmu4fZ/SMZoSqw/:iTZaqdiXSp0c02uFG6dAk3xMWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5de9e442dc9cf6783045f5beeb7c88b0_NeikiAnalytics.exe

Files

5de9e442dc9cf6783045f5beeb7c88b0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 820KB - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ