0c94d536c8bfa2c8203b596b81a3b72d05c4811b3daae3ddd27f8d97db524ebd_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c94d536c8bfa2c8203b596b81a3b72d05c4811b3daae3ddd27f8d97db524ebd_NeikiAnalytics.exe
Size

42KB
MD5

a58429677cf269cac3aedd4236c732a0
SHA1

2576089de8557fe1507e503d5e0b7a8ab97da872
SHA256

0c94d536c8bfa2c8203b596b81a3b72d05c4811b3daae3ddd27f8d97db524ebd
SHA512

4c822b461d3258ddf7f5af93f57465ff0c8c7f4ab4a84492591457b37b5abcb5d9e3bd8af0c89917cde67b98666c9b13e9b2ae8090a3554b621c621b870e32b6
SSDEEP

384:0K5kypvP/fm5iySkMP+OijkOj0tOcOYWO6O9Ock8szTDhCU/xLI3BZnthyWoPxIB:0KntXyDOo26TDhCU/xLQBZnK5GXmNIn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c94d536c8bfa2c8203b596b81a3b72d05c4811b3daae3ddd27f8d97db524ebd_NeikiAnalytics.exe

Files

0c94d536c8bfa2c8203b596b81a3b72d05c4811b3daae3ddd27f8d97db524ebd_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

536a6c279dc0b00efce92ce381ef67ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SetFocus
EndDialog
SendMessageA
MessageBoxA
GetDlgItem
ScrollWindow
DestroyCursor
CharLowerA
ShowCursor
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
GetStartupInfoA
CreateDirectoryA
GetModuleHandleA

comctl32

ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ