5422a77f84e5a69a45eb55fd41968e70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5422a77f84e5a69a45eb55fd41968e70_NeikiAnalytics.exe
Size

93KB
MD5

5422a77f84e5a69a45eb55fd41968e70
SHA1

936890de38c1568d43d11969532465fd8fdf0c3e
SHA256

a78291d465cc2e5b6355d6aded64b3e52b70be6e6f7cf820d49315e691a745ba
SHA512

293da7d7ec52a607fd6f1e79acc754df5c3a4537b5f35873cab587473b71a308b4e831f2ecefd3b2df8c90d24fd4d65c0e8d82e5b414c61004736caf6ea2fdca
SSDEEP

1536:0B74QaP4gyiPSw474G46RxDUkBBF1Xv4v:0B7taP4gyiPSw474G4AxDUQFv4v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5422a77f84e5a69a45eb55fd41968e70_NeikiAnalytics.exe

Files

5422a77f84e5a69a45eb55fd41968e70_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

070d723f09deab270e6f8534509d239e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_ap\Main\build\win\results\Release\info\template.pdb

Imports

kernel32

GetProcAddress
LoadLibraryW
HeapAlloc
GetUserDefaultUILanguage
HeapFree
ExitProcess
GetCommandLineW
GetModuleHandleW
GetProcessHeap

shell32

CommandLineToArgvW

msi

ord205
ord173

user32

MessageBoxExW

shlwapi

StrCmpW

Sections

.text
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ