9944e88d612700b688f48b8f98f605efd0675c8ab46c6bd9f9a22fbed5243d94_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9944e88d612700b688f48b8f98f605efd0675c8ab46c6bd9f9a22fbed5243d94_NeikiAnalytics.exe
Size

28KB
MD5

1f6050764ab1a36751953282921255b0
SHA1

08672713ea4afc8ac5b530c9f2e697418a246625
SHA256

9944e88d612700b688f48b8f98f605efd0675c8ab46c6bd9f9a22fbed5243d94
SHA512

da272b07eef346e8a356fb47927873dcbf953c5882d46208c8f35f1b6a39eb85e5a4399beed013787ed9e365860007e5245d30084b393c75af0bc2d846b6bc1d
SSDEEP

384:AGNkzd6k6qeGOIuQt50yV3GQhn93MKguGikhscLIFxJEpAI0Bndc:A+6lS4N3GQP3XLBgwx6pA7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9944e88d612700b688f48b8f98f605efd0675c8ab46c6bd9f9a22fbed5243d94_NeikiAnalytics.exe

Files

9944e88d612700b688f48b8f98f605efd0675c8ab46c6bd9f9a22fbed5243d94_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

fe487be3ca290bea84564888c7619239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
EndPaint
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

CloseHandle
lstrcpyA
LoadLibraryA
GetProcAddress
GetLastError
GetCommandLineA
ExitProcess
CreateFileMappingA
CreateFileA

gdi32

CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ