5036c2b55ac43c029a7581ba7d6890309328de887e933ce0d10eaefddb84fb12_NeikiAnalytics[.]exe

General

Target

5036c2b55ac43c029a7581ba7d6890309328de887e933ce0d10eaefddb84fb12_NeikiAnalytics.exe
Size

200KB
MD5

0035a68efb954a58e1df286285bcd300
SHA1

5e3cb4c02054284a423ec916f44b2723f4dc5cdc
SHA256

5036c2b55ac43c029a7581ba7d6890309328de887e933ce0d10eaefddb84fb12
SHA512

16324c3cd54169a62c8bf3d0f6c3fdf2e6b613175546bcc45dc02aaa518e057a60dd884a75798a5695941738189b3fed756ebdd0d538c8aab6fe326fa158cddf
SSDEEP

1536:iEL/PXe9iW+Rk9FTUlKpPJxyd4XWAGw1fI0msBx5MpU6cZ+I1yOovzG:3e9iWnYKNydaGw1fbmsn5gU6jIkOovzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5036c2b55ac43c029a7581ba7d6890309328de887e933ce0d10eaefddb84fb12_NeikiAnalytics.exe

Files

5036c2b55ac43c029a7581ba7d6890309328de887e933ce0d10eaefddb84fb12_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

5d4ea5a640d08b8f859e3ca9eb2cb01a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
IsBadWritePtr
IsBadReadPtr
HeapValidate
SetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d4ea5a640d08b8f859e3ca9eb2cb01a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 20KB - Virtual size: 22KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 20KB - Virtual size: 22KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB