2c78603bd708937b6c8e370ad495935fae65bfe4e873ba0016c96c533bf3b931_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c78603bd708937b6c8e370ad495935fae65bfe4e873ba0016c96c533bf3b931_NeikiAnalytics.exe
Size

148KB
MD5

49bbeb87853d4ac02ca1ed943e8d12d0
SHA1

1537e0781665ff5a50d23ba03f27e741046a8753
SHA256

2c78603bd708937b6c8e370ad495935fae65bfe4e873ba0016c96c533bf3b931
SHA512

392b9490239f13e191838b65390af72c4421d89e0fb4beac94f0ee1f8fcff1ca79dd2cad72926907c07f882717f7d569163603eec6607b7fe1b292d5dfb3a458
SSDEEP

1536:Kj65Jnp3ZbCWZSIhevH9Y1I9Reqp9TWJq8ZjCjWazLh6AF2/6:2wnpBvsvdw6Eqaq8EjHzLhTF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c78603bd708937b6c8e370ad495935fae65bfe4e873ba0016c96c533bf3b931_NeikiAnalytics.exe

Files

2c78603bd708937b6c8e370ad495935fae65bfe4e873ba0016c96c533bf3b931_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

bf707741581e4851c91235a45375b07e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrW
PathFileExistsW
PathAppendW

kernel32

GetTickCount
ExitProcess
GetCommandLineW
FreeLibrary
CreateProcessW
LoadLibraryExW
WaitForSingleObject
GetModuleHandleW
IsProcessorFeaturePresent
GetModuleFileNameW
lstrlenW
GetProcAddress
CloseHandle

user32

MessageBoxW

comctl32

ord17

Sections

.text
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ