8d5bcecc60b774c7551dbeba1216d73dcc7b3835068818596ff41eae2c0deb2f_NeikiAnalytics[.]exe

General

Target

8d5bcecc60b774c7551dbeba1216d73dcc7b3835068818596ff41eae2c0deb2f_NeikiAnalytics.exe
Size

39KB
MD5

efc6836cb1f2cac6d30a28dc4e463750
SHA1

8515e55c43fe3b0b409f1e4a69457823f92fae32
SHA256

8d5bcecc60b774c7551dbeba1216d73dcc7b3835068818596ff41eae2c0deb2f
SHA512

43f782e1fafec8b445c553f42f79fa61d9b2a742aa1e6340d9700b4ee2cfe151aff6682bade250cad27817554374297e32ddb8d1dda6a574376b62b1ce3eda88
SSDEEP

768:ZUfXAiMO/MLcfL+s38KfcKhuO9BnHa2PjPU8bVI+Z:eXLM6MLcfLv3EKxN3r5Vt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5bcecc60b774c7551dbeba1216d73dcc7b3835068818596ff41eae2c0deb2f_NeikiAnalytics.exe

Files

8d5bcecc60b774c7551dbeba1216d73dcc7b3835068818596ff41eae2c0deb2f_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

7dc87ef66f0ed84345e4cf471a3c3455

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

regsvr32.pdb

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
__argc
__wargv
_wsplitpath
_wcmdln
wcslen

advapi32

RegQueryValueW
RegCloseKey
RegOpenKeyExW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleHandleA
LocalAlloc
FormatMessageW
SetErrorMode
lstrcatA
WideCharToMultiByte
LoadLibraryExW
GetLastError
GetProcAddress
lstrcmpW
GetStartupInfoW
QueryPerformanceCounter
lstrlenW
lstrcpyW
lstrcatW
lstrcpynW
FreeLibrary

user32

LoadStringW
MessageBoxW
wsprintfW

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7dc87ef66f0ed84345e4cf471a3c3455

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

user32

ole32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 32KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 32KB