31fcb0857ef865ebdc29384bc739091549bf3d827e0938befce0cb651411fe93_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

31fcb0857ef865ebdc29384bc739091549bf3d827e0938befce0cb651411fe93_NeikiAnalytics.exe
Size

45KB
MD5

874e0e5124d00e8764072c2c03a403f0
SHA1

072490946f48a29f28c28b60e12cdf9992329ded
SHA256

31fcb0857ef865ebdc29384bc739091549bf3d827e0938befce0cb651411fe93
SHA512

7b8a85765ee6d6904155d965593397f57b2177145301c0875596d2ca8e3bb0032a451e30b7f9dc4a0a3b7208ec0ecb90fa162232f1d664868004988e7c6c56e4
SSDEEP

192:GrITdb2X2VFmfjNIGmMTPUEN7jIZSnDJLVwqnkqU/CDola1:yIT4BjKGmMztNvIZSD/wHqUWol2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31fcb0857ef865ebdc29384bc739091549bf3d827e0938befce0cb651411fe93_NeikiAnalytics.exe

Files

31fcb0857ef865ebdc29384bc739091549bf3d827e0938befce0cb651411fe93_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Projects\Loader\Release\Loader.pdb

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 891B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ