4b4f2f6cb1d286b06917849e4fadb6c0_NeikiAnalytics[.]exe

General

Target

4b4f2f6cb1d286b06917849e4fadb6c0_NeikiAnalytics.exe
Size

80KB
MD5

4b4f2f6cb1d286b06917849e4fadb6c0
SHA1

384cf53a42c37468911293398c47da7416b032aa
SHA256

f8c345e0c2033883c0fd578f1d289d50931822424ee6cc2077bfce2d87e1af46
SHA512

25a7790badaaf80047d14a8349c756f98a2dbbd584f00d3b0a00a837bae243a951c122f622ef144aa38440290bebaf8f15efdabf63a6ccb02637fb22198c7815
SSDEEP

768:i4zihK6lpU71HxaIP1PGWkXX6t79qxPzk6y6aeB+vc7mOEHkYDrtes+u:i4zyKP9GW3JFPeISEEY3tes+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b4f2f6cb1d286b06917849e4fadb6c0_NeikiAnalytics.exe

Files

4b4f2f6cb1d286b06917849e4fadb6c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1e134df78c720419c72f4b0e04fd4ee5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

msvcrt

fwrite
fopen
strspn
strcspn
fclose
fread
strrchr
fflush
_putenv
memmove
strpbrk
fgets
strchr
perror
malloc
_exit
sprintf
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
strncmp
getenv
printf
exit
_iob
fprintf
__mb_cur_max
calloc
_pctype
_isctype
_XcptFilter
_strdup
_stat
_strnicmp
_stricmp
_close
_open
_read
_lseek

kernel32

GetCommandLineA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
CreateProcessA
GetProcAddress

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e134df78c720419c72f4b0e04fd4ee5

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1024B

.. Size: 28KB - Virtual size: 28KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1024B

..
Size: 28KB - Virtual size: 28KB