180929deaa8f4b25295c10a623050b83130b0ec32bd6a34d4a0321b7da8cafe0_NeikiAnalytics[.]exe

General

Target

180929deaa8f4b25295c10a623050b83130b0ec32bd6a34d4a0321b7da8cafe0_NeikiAnalytics.exe
Size

208KB
MD5

fb9c4bc3a5118fad9e7f5c0a8ef68620
SHA1

3df4e5a3edb35f1d1587d81b1bc60c797cf0cf36
SHA256

180929deaa8f4b25295c10a623050b83130b0ec32bd6a34d4a0321b7da8cafe0
SHA512

63bd52f24a863b948c42279f40100c11942b19824cee8326e885ea4813d69ffceceb0b62f0d44117b00254fd4dec8db22e5fa40a94380a37ef3e219909f416c1
SSDEEP

1536:9bSqM/PXeBk2Nr2/dTqwdGfxua1n9oPUPc60BvSpEmp6zskoZA2:9pmeBk2tmqwaxzniPUkpBvSmm6po62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
180929deaa8f4b25295c10a623050b83130b0ec32bd6a34d4a0321b7da8cafe0_NeikiAnalytics.exe

Files

180929deaa8f4b25295c10a623050b83130b0ec32bd6a34d4a0321b7da8cafe0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

d889c5d90f0ec38d706800741cd4c11f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
IsBadWritePtr
IsBadReadPtr
HeapValidate
FlushFileBuffers
SetStdHandle
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d889c5d90f0ec38d706800741cd4c11f

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 164KB - Virtual size: 161KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 20KB - Virtual size: 22KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 161KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 20KB - Virtual size: 22KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB