582603f8faa0572ceb8b003154901970_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

582603f8faa0572ceb8b003154901970_NeikiAnalytics.exe
Size

10KB
MD5

582603f8faa0572ceb8b003154901970
SHA1

b132744f1a8bce961daa67d1542425f62e9467cc
SHA256

0aaf8e0ec00f4ec7847b5ff177866c185a2a0480a61014981240852a48a33834
SHA512

103220aa602ad406b4217270faaca935961bac6fb6c9374a2cdc89a28db6895f7a744e1653c621a5445a0892ab8afe3c9132ad9ec28dd741cbd62819a2cb3555
SSDEEP

96:mzpyn7pC41Xf+JAjhXmKmXSjiT/8oMmcm3wV7PWmef3mCm3Ml9LuRY:8y7phhuQmK0SiaSnTqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
582603f8faa0572ceb8b003154901970_NeikiAnalytics.exe

Files

582603f8faa0572ceb8b003154901970_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

RunDllHostCallBack

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ