d6337ef5fc47e21e891f33fbcdccc030_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6337ef5fc47e21e891f33fbcdccc030_NeikiAnalytics.exe
Size

142KB
MD5

d6337ef5fc47e21e891f33fbcdccc030
SHA1

cbb97511652785d3d179f4a7e435017540fe7428
SHA256

e59436282d40b7c148006b09ec9099bc910831170f0e04abf2c337169f95f170
SHA512

19c8d9191b6e625f27d77abb63c6a4476a9bca9263aa9d787901d81061a25dcc5ca364f82adbe55d43846b5c3f1c65e42b4309523649b9c30997b2643cc4d07e
SSDEEP

3072:oFK0j+FdzZETCP8IzbiebptqgF+2lzcjAWjHALHFaT0EYCIVYJ+Y9:oFpQIiFjW89YJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6337ef5fc47e21e891f33fbcdccc030_NeikiAnalytics.exe

Files

d6337ef5fc47e21e891f33fbcdccc030_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

4b89b82326a5feb2e41e710fb8d76e9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CloseHandle
lstrcpyA
HeapFree
HeapAlloc
DeviceIoControl
CreateFileA
ExitProcess
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapCreate
RtlUnwind
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetStdHandle
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Exports

Exports

Driver32Init
Drv32Entry
hDriverHeap

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rtext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ