334dc486dce8ce66ec44076f5b403d04318e86ca4871964fd78745f2b7189980_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

334dc486dce8ce66ec44076f5b403d04318e86ca4871964fd78745f2b7189980_NeikiAnalytics.exe
Size

5KB
MD5

7d3aa2bebd8eb2231149a74b11392ab0
SHA1

13a57d468d96b641a877c71dc11220c84814e290
SHA256

334dc486dce8ce66ec44076f5b403d04318e86ca4871964fd78745f2b7189980
SHA512

bbf712db5619e6a8c6adbb5f8e987e878d73925d1e7238117b1c23ffa1820f953560112ab90661f6cf2623941aca1fe94ec3f13491cb249e445f52f0fdf7d247
SSDEEP

48:SubGfpaSaL5waWaXWkZLkSogyaNYd/ua+v9NC31sWFKdy1QFERT9:gyWKoY0utvq3tK1WRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334dc486dce8ce66ec44076f5b403d04318e86ca4871964fd78745f2b7189980_NeikiAnalytics.exe

Files

334dc486dce8ce66ec44076f5b403d04318e86ca4871964fd78745f2b7189980_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

807ad093e19fb5b728ae50ce24ca0a8a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

S:\wtf\_x86\service.window\intro.dll:pdb

Imports

system

?sleep@Thd@@SAXI@Z
?create@String@@SA?AV?$Ref@VString@@@@XZ
??1Object@@MAE@XZ
?selfTest@Object@@UAE_NV?$Ref@VStream@@@@@Z
?dump@Object@@UAEXV?$Ref@VStream@@@@@Z
?_selfTest@Object@@UAE_NV?$Ref@VStream@@@@@Z
?_dump@Object@@UAEXV?$Ref@VStream@@@@@Z
?gcproxy@Object@@UAEPAVGcProxy@@XZ
?obj@Object@@UAE?AV?$Ref@VObject@@@@XZ
?counterRef@Object@@UAEIXZ
?unlockRef@Object@@UAEXXZ
?lockRef@Object@@UAEXXZ
?decRef@Object@@UAEXXZ
?incRef@Object@@UAEXXZ
??0Object@@QAE@XZ
?lock@InitCode@@SAXXZ
?unlock@InitCode@@SAXXZ
?free@Heap@@SAXPAXI@Z
?alloc@Heap@@SAPAXII@Z
??_7type_info@@6B@

Exports

Exports

?create@@YA?AV?$Ref@VWindowMod@@@@XZ

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ