a188ea4d911815821de6b046eda7fd151ee5b9cc00d569df5709c69ad7cf5607_NeikiAnalytics[.]exe

General

Target

a188ea4d911815821de6b046eda7fd151ee5b9cc00d569df5709c69ad7cf5607_NeikiAnalytics.exe
Size

40KB
MD5

316bc22bcf2a09e98f9e71e9699cc230
SHA1

9a2dfce501a49f63e1e8acf2a392d619df9fcd05
SHA256

a188ea4d911815821de6b046eda7fd151ee5b9cc00d569df5709c69ad7cf5607
SHA512

01e00e69712555999de1cf0d47f08f6a4d1a30e03f448a1d79304e188d41a864a2af9508b83231f98dbd82dee690e11ad58e043bb3b4921a17e6f920d39d1f6d
SSDEEP

384:GeprknnLn+Xn+Lnsyjsr+K+B7w1J1C/1HkppfdJdI4Rb2J23GwtCK2gF:nZIL+X+LsDo7u0SdJ2J2WwtCKfF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a188ea4d911815821de6b046eda7fd151ee5b9cc00d569df5709c69ad7cf5607_NeikiAnalytics.exe

Files

a188ea4d911815821de6b046eda7fd151ee5b9cc00d569df5709c69ad7cf5607_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

5347c28998d8590188f7cab11ab1d43f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetProcAddress
LoadLibraryA
Sleep
CloseHandle
CreateFileA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetSystemDirectoryA
GetShortPathNameA
GetSystemTime
ReadFile
SetFilePointer
WriteFile
lstrlenA
CopyFileA
GetTempPathA
LCMapStringA
HeapReAlloc
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
LCMapStringW

wininet

HttpQueryInfoA
InternetOpenA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5347c28998d8590188f7cab11ab1d43f

Headers

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB