a8a4efac8ee94f6e40f018a5e89d175e9c56f2ea03a95a57ba7b523b30fab7e6_NeikiAnalytics[.]exe

General

Target

a8a4efac8ee94f6e40f018a5e89d175e9c56f2ea03a95a57ba7b523b30fab7e6_NeikiAnalytics.exe
Size

58KB
MD5

84952f6b1fe44c017af8f30aaea30cd0
SHA1

7174156f16d2bee33d9b3be4242f46758ef02c34
SHA256

a8a4efac8ee94f6e40f018a5e89d175e9c56f2ea03a95a57ba7b523b30fab7e6
SHA512

e1cc41528c0af6ba32167e1a55bde2be83fc8fb9c59dd0c9fcd7f0d0e55e67c962d9b68e2ca874b12cd062194f4b1fe6b18e4905dcc605d2a7d48d908a8aca10
SSDEEP

1536:z/jUwfZ7BURaHUry7nToIfYIOlIO+CM6:dx7BURaHUrgTBfev+CM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8a4efac8ee94f6e40f018a5e89d175e9c56f2ea03a95a57ba7b523b30fab7e6_NeikiAnalytics.exe

Files

a8a4efac8ee94f6e40f018a5e89d175e9c56f2ea03a95a57ba7b523b30fab7e6_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

7e3560e4dd2deaa398fa039458dd4b4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
strerror
fflush
_errno
fopen
fread
fprintf
_vsnprintf
sprintf
ftell
fseek
fclose
clearerr
_fdopen
_initterm
_adjust_fdiv
fwrite
fputc

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e3560e4dd2deaa398fa039458dd4b4b

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 116B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 1024B - Virtual size: 872B

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 116B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 1024B - Virtual size: 872B