21dab97d9831814f57ffd5b601c7415ba3409f4d952de2cc142e45a52864e77f_NeikiAnalytics[.]exe

General

Target

21dab97d9831814f57ffd5b601c7415ba3409f4d952de2cc142e45a52864e77f_NeikiAnalytics.exe
Size

431KB
MD5

fa34550affd0fbce54cbdda86f5472e0
SHA1

b115142a6750b477df143cae69eab2d7f1a859f1
SHA256

21dab97d9831814f57ffd5b601c7415ba3409f4d952de2cc142e45a52864e77f
SHA512

df077b349a1d7e6b488bc02543b54779a028ce5f63dce39768b301cb11ef6f80759191abc42bab9a797ceeec5c089b3da0e61c790e74c4756c1b1162ecf71031
SSDEEP

6144:QzmcxCnTQWIF6sDVTJEP/OHHbSG9DsWqC6VctkdZhWH+mzM2w+QKJ6wzPUicrc1+:KCTQm+VJHGYqVOtBeCqOb26NmLHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21dab97d9831814f57ffd5b601c7415ba3409f4d952de2cc142e45a52864e77f_NeikiAnalytics.exe

Files

21dab97d9831814f57ffd5b601c7415ba3409f4d952de2cc142e45a52864e77f_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

ca4c70b3a69137ec777fc848626a0aaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
GetClipboardOwner
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA

gdi32

CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps

winmm

mciSendStringA

msacm32

acmStreamOpen

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca4c70b3a69137ec777fc848626a0aaf

Headers

File Characteristics

Imports

user32

gdi32

winmm

msacm32

kernel32

Sections

.text Size: 1KB - Virtual size: 1KB

.code Size: 512B - Virtual size: 97B

.data Size: 111KB - Virtual size: 110KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 315KB - Virtual size: 315KB

.text
Size: 1KB - Virtual size: 1KB

.code
Size: 512B - Virtual size: 97B

.data
Size: 111KB - Virtual size: 110KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 315KB - Virtual size: 315KB