4c04f8742fb9cca93d465a21f0893d6af35467ae982163dc649b1e8e5ea82fbc_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c04f8742fb9cca93d465a21f0893d6af35467ae982163dc649b1e8e5ea82fbc_NeikiAnalytics.exe
Size

37KB
MD5

4f0119c35ad5c53cb7e2b3556e4d60d0
SHA1

faf3f5bbd21bcf40bfcc2690c1531f3b00330789
SHA256

4c04f8742fb9cca93d465a21f0893d6af35467ae982163dc649b1e8e5ea82fbc
SHA512

040cc112b881de38d30eaa554b60e255e20455c1647e75115e6cddf50785c0d55cab58c66a893f0dcfe2edb937b2bb75722ae218e18145b08886d32bc73abca5
SSDEEP

768:NElJwbpi/cp+nG+neETxj4S1QZaoQyHNFK+ZhFEh7jF:OlJwI/cp+nhXTiS1sQyHNFK6h6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c04f8742fb9cca93d465a21f0893d6af35467ae982163dc649b1e8e5ea82fbc_NeikiAnalytics.exe

Files

4c04f8742fb9cca93d465a21f0893d6af35467ae982163dc649b1e8e5ea82fbc_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

1a0d0c3be98baa15c3be34c0f0c2920c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegOpenKeyExW
RegCloseKey

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpynW
lstrlenW
lstrcmpiW
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
ExpandEnvironmentStringsW
lstrcpyW

user32

RegisterClassW
DispatchMessageW
GetMessageW
IsWindow
CreateWindowExW
DefWindowProcW
DestroyWindow
PostQuitMessage
SetTimer
wsprintfW

imm32

ImmDisableIME

shell32

ShellExecuteExW

shlwapi

ord437

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE