67b21fcb886bc0bd9cd506122ebf3b10_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67b21fcb886bc0bd9cd506122ebf3b10_NeikiAnalytics.exe
Size

216KB
MD5

67b21fcb886bc0bd9cd506122ebf3b10
SHA1

27548fde9dde708bcb99013afd67ca94dbc10060
SHA256

4ae4fe2496a9847672903e45b2cadc8a2e43e8cdea04d5490f68a0e93c237a51
SHA512

41ea10852cc23037ec38e8766bc9f0fbde29f8f4f2040249df56dc880732493021d31777054c908c68cd20bd017117b87c38afe8d2864984974c418b5d7a95ff
SSDEEP

3072:PdNbMJwVruvgpOadDXmORDOU0I1erU5m4mITRGunkUYEre7xPgpwi84FquAA+ybq:DVru67dDXhF11erUIITznNBSi84Kr89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b21fcb886bc0bd9cd506122ebf3b10_NeikiAnalytics.exe

Files

67b21fcb886bc0bd9cd506122ebf3b10_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

7c2c32bf67f3f93191223cc710f14f69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

LookupPrivilegeValueA

ole32

CoCreateInstance

oleaut32

VariantClear

wininet

InternetCloseHandle

iphlpapi

GetAdaptersInfo

Exports

Exports

func

Sections

.text
Size: 198KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE