9c441019d613b1d3199ce26038b92750_NeikiAnalytics[.]exe

General

Target

9c441019d613b1d3199ce26038b92750_NeikiAnalytics.exe
Size

1.1MB
MD5

9c441019d613b1d3199ce26038b92750
SHA1

7e41b8950bdf6336085deb56eeb64c51cbac8b8b
SHA256

25942b16036c9bb270a52ee0410fba06af15388728eeb15143717716c31ebc27
SHA512

029e883d80998228927a68c3c30dc4201bbc18fae4733433e97c0dc655611dc960765eda8038d3634dab8a090d724a4ddab3cf7be4999ea5688c348ad45438f9
SSDEEP

24576:fKBml7NbKwFox/scViaEdBSNiozKBlBDHHTx/scVia6NiCOOOOO:fQi7F6Vi7dBSNTzQltHHT5ViJNxOOOOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c441019d613b1d3199ce26038b92750_NeikiAnalytics.exe

Files

9c441019d613b1d3199ce26038b92750_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

cd3bccc792b284ec6298032707159a4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord5300
ord4080
ord4622
ord4424
ord3738
ord561
ord3953
ord825
ord815
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord6375
ord4486
ord3079
ord4274
ord269
ord826
ord600
ord1578
ord6467
ord1116

msvcrt

??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
memcpy

kernel32

LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc

gdi32

DeleteObject

Exports

Exports

LOAD

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd3bccc792b284ec6298032707159a4b

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

gdi32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 4KB - Virtual size: 2KB