0a05f217f93ae5fef29e418053e7ea90_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a05f217f93ae5fef29e418053e7ea90_NeikiAnalytics.exe
Size

103KB
MD5

0a05f217f93ae5fef29e418053e7ea90
SHA1

9be0b2dded50588dfc24984268e021566d0b74fc
SHA256

0bf9d561b8c76d75cc8df9e8164f3e52d7c38f208f782af06077e32ec3532720
SHA512

649c2b404ab8ad0479359228bfc266986c24fab12d5b625b049f370c6ffbba27f632283fead6d9a13d6281b40f347e63ad12bff56587750993368f91720f5565
SSDEEP

1536:tdA2+XgIjc7PZVxhWKfuTvUumhZdtcSvJBi+qMHae81:tGJwIjc7hVXWKmTvUumhZPBRB9qR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a05f217f93ae5fef29e418053e7ea90_NeikiAnalytics.exe

Files

0a05f217f93ae5fef29e418053e7ea90_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

a4f4fd1f50bac23c6d90a4bfc8d6114b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_apms\build\Release-results\info\Adobe AIR Application Installer.pdb

Imports

kernel32

GetModuleFileNameW
GetProcAddress
LoadLibraryW
HeapFree
GetFileAttributesW
HeapAlloc
GetProcessHeap
GetCommandLineW
SetStdHandle
ExitProcess
CreateFileW
GetModuleHandleW

user32

MessageBoxW

msi

ord173
ord205

shlwapi

AssocQueryStringW
StrCmpW

shell32

CommandLineToArgvW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ