2313174f52a37e6f3a88c33671c7cb80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2313174f52a37e6f3a88c33671c7cb80_NeikiAnalytics.exe
Size

837KB
MD5

2313174f52a37e6f3a88c33671c7cb80
SHA1

12db961d9be5e5cccf9365bfd11a81a21e7625ba
SHA256

3f1e303afb135094d31aa2d756075223c83f575669c3c10026608e0c13dbf314
SHA512

40a8b1ef4325a6fc3e5c1b89d524308bf45a4c076c8cdba07a8b0162733661272b341c3b5d234e62572edef451076a94c7d77c6109c9dea6516326cc70268a7b
SSDEEP

24576:/5GreKX5erGSaGGDTV68L5hxwwBx2yGbEvF8:/oreLCG4TLr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2313174f52a37e6f3a88c33671c7cb80_NeikiAnalytics.exe

Files

2313174f52a37e6f3a88c33671c7cb80_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

a48f064710c98bcde07c483c81b4a2b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

ntdll

RtlFreeHeap

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

FindNextUrlCacheEntryA

urlmon

UrlMkGetSessionOption

wsock32

WSACleanup

rpcrt4

UuidCreateSequential

oleacc

AccessibleObjectFromWindow

psapi

GetProcessImageFileNameA

Sections

CODE
Size: 824KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE