83813358780f43476d85acea4288bc8430e5eaf8c7a76e5128c99e55d84b259d_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83813358780f43476d85acea4288bc8430e5eaf8c7a76e5128c99e55d84b259d_NeikiAnalytics.exe
Size

7KB
MD5

d3b27a332efcb425141bae068626c390
SHA1

6c8f248119397fbae56a51e706722e12aa769c92
SHA256

83813358780f43476d85acea4288bc8430e5eaf8c7a76e5128c99e55d84b259d
SHA512

8b664991cdd6bad26c9f3e8281ed65edb542e0f251cfbe33dd3c7df48985f6293fd2b55ff76160b3fbf2724df5514c14de2afb086889627ab34b58a07d0a3a39
SSDEEP

96:FkeuAx2WmE36e07v03GJsBo+cw5Wp9se1YctPDx1e91D:FkNC+E3S4C5PlDx1eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83813358780f43476d85acea4288bc8430e5eaf8c7a76e5128c99e55d84b259d_NeikiAnalytics.exe

Files

83813358780f43476d85acea4288bc8430e5eaf8c7a76e5128c99e55d84b259d_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

a330ab4571994ddebf91be7a95f5c0d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
GetTickCount
Sleep
CloseHandle
CreateThread
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA
CompareStringA
InterlockedExchange
RaiseException
FreeLibrary
LoadLibraryA
GetLastError
LocalAlloc
GetProcAddress

user32

wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset

Exports

Exports

winampGetInModule2

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ