59c750f4083f2e272fdf8f88f3ff6cf0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

59c750f4083f2e272fdf8f88f3ff6cf0_NeikiAnalytics.exe
Size

1.9MB
MD5

59c750f4083f2e272fdf8f88f3ff6cf0
SHA1

803093e89a20f99277d44020b9a90f108af5b2bb
SHA256

51b3108fad9a553e524794d7c3b80d53a9d5cbe37b777ca0d7c1553db4c62ee4
SHA512

9129424cff8c949fd0d58c2068c9ff7e41e96f91283929e0e9aa8df55a2cac30c08ae727124ae579ba8efb2490fe95fdba186d989d0f7fcb63cd948359477df6
SSDEEP

24576:FROcP2tYWHFhoiGCG2CDWHdR+8+VpvjDKPbxReQLudr44NtE/BZ:LOcglLG2CDkZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59c750f4083f2e272fdf8f88f3ff6cf0_NeikiAnalytics.exe

Files

59c750f4083f2e272fdf8f88f3ff6cf0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

62f205fe3d5e06c190cbad78ac9b9e4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm90

ord137

kernel32

GetModuleFileNameA
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeA
VirtualFree
RtlUnwind
WriteFile
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ