1c794e763333b81af99e92584649e350_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1c794e763333b81af99e92584649e350_NeikiAnalytics.exe
Size

250KB
MD5

1c794e763333b81af99e92584649e350
SHA1

384d17b6f5868aef1e8880e99b9cf45ffff06102
SHA256

5ab657a4b14d8d8ad58f70af0efeadfd60441bb5a30dfb898ca4de5bc331a9ab
SHA512

96a149cc4c099fe95780ad8754b8e7a4ae7520bd279ad86c5f1a40ab54255a1fd49b7f5201a9c50a845842f1bdf585edbc8c98aeaf8db5ee67d55fd093e006dd
SSDEEP

6144:6V9scbhMNTSjCiHGRi2PQBarOcn/zZhmHCtr3J:6V9fb2ViH4PNrZFjpJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c794e763333b81af99e92584649e350_NeikiAnalytics.exe

Files

1c794e763333b81af99e92584649e350_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

d437eb5d425a16d9c6b37d5b6de0d3d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fopen
fseek
fclose
floor
ceil
_CIpow
sqrt
fabs
malloc
free
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
LoadLibraryA
GetProcAddress
HeapReAlloc
TlsAlloc
GetVersionExA

user32

CallWindowProcA
DestroyIcon
FillRect

gdi32

GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ