9851b473a7309da131862a7bce3067e0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9851b473a7309da131862a7bce3067e0_NeikiAnalytics.exe
Size

718KB
MD5

9851b473a7309da131862a7bce3067e0
SHA1

06439c93d710a9fa9a6efa3824776ad625ef1803
SHA256

2a43f837549dfa4e4f9c9dffbda1def7d9f2380fa0097f9d48da80a174b086b9
SHA512

f0a438ef0de28bcb8cc9239881fde2cd55f2453736b8d2e42f4d45fd3277ce84f65aa913057e86f7a702e2ec8b63fb7330624d9483da0db39161f32a6358b442
SSDEEP

12288:lP45SAMc2czNMke2zKy3T9MeXTCX0l/9ASf1hjsR/nQdKEKQqtfBGn:lQxn2qNrD3T95XBl/NJsR/+3Khin

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9851b473a7309da131862a7bce3067e0_NeikiAnalytics.exe

Files

9851b473a7309da131862a7bce3067e0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE