12978e89beb08d1b476ce41604facd90_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12978e89beb08d1b476ce41604facd90_NeikiAnalytics.exe
Size

34KB
MD5

12978e89beb08d1b476ce41604facd90
SHA1

7f92d452cd1b3ff2420c883ac5e0026ea3322602
SHA256

e460b5e19e920e76e6168078f77bb124ffbf56116d5bc8e512bde44a5f3e86f9
SHA512

acb68ed190fdf5b5e70e31c7a9bb841b0e19a0be5536d27f6c4a287680703ac4cafb00c316b95a1aa32a8543cfd85c635bfa5a7fb2eaaca3aac89511c0e69ac8
SSDEEP

384:sAI5y8tO/IxoM7cslMSG8AWpC81HMPL0f5R:sAI5y4MyESG8AWoWf5R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12978e89beb08d1b476ce41604facd90_NeikiAnalytics.exe

Files

12978e89beb08d1b476ce41604facd90_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

9bdeb3d243b47ce5aa03f899f7f8334d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageW

kernel32

CreateFileW
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetModuleHandleW
FindFirstFileA
FindClose
GetSystemTime
ReadFile
GetProcessHeap
CloseHandle
GetFileSize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE