31506f4b2f0628bf9ec6a203c750478a811a525a79a53955efeecb527e7b3420_NeikiAnalytics[.]exe

General

Target

31506f4b2f0628bf9ec6a203c750478a811a525a79a53955efeecb527e7b3420_NeikiAnalytics.exe
Size

39KB
MD5

b5bb898eba5df415c5098084331ac230
SHA1

dc7298bd6810220345496a233b93ce6ba2b775eb
SHA256

31506f4b2f0628bf9ec6a203c750478a811a525a79a53955efeecb527e7b3420
SHA512

c8120ca7df5ed50041816abf86f97b483ccf7e306b9b63c15dc46d724bb1102ac188d75ce66ef27e010c9638450053b8d2e8091896f35d843edf5d55649d1baf
SSDEEP

768:Mv7uVEFx5g56AsFcNXG7IiMk0Bf3HJ+4T4mg7yKqzq6X:y8Exg56ALNXG8Lp3HJDUmg7yJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31506f4b2f0628bf9ec6a203c750478a811a525a79a53955efeecb527e7b3420_NeikiAnalytics.exe

Files

31506f4b2f0628bf9ec6a203c750478a811a525a79a53955efeecb527e7b3420_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

fdd32489eb7124c4c42e24ecdfb954af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SBUnattend.pdb

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrcmpW
GetLastError
WritePrivateProfileStringW
HeapFree
GetProcessHeap
GetTickCount

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
wcstok
_vsnwprintf

shlwapi

UrlEscapeW

shell32

SHGetFolderPathW

wdscore

CurrentIP
WdsSetupLogMessageW
ConstructPartialMsgVW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fdd32489eb7124c4c42e24ecdfb954af

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

shlwapi

shell32

wdscore

advapi32

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB