042c9629d8a6c846427d1b82fd0897f587fd4f55cfca0ff5369dd89f5b80df2c_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

042c9629d8a6c846427d1b82fd0897f587fd4f55cfca0ff5369dd89f5b80df2c_NeikiAnalytics.exe
Size

32KB
MD5

be66ab49dcacd168fb0d515093e60340
SHA1

b99e755a2c9455646d814c86e9fcc2ce0c946e0f
SHA256

042c9629d8a6c846427d1b82fd0897f587fd4f55cfca0ff5369dd89f5b80df2c
SHA512

80718d053b3b1ba48583f8a0f4beee533fa9d023aa001b251edbd2d0456d6d92fb00bdce8e41fe66d7f11349f975e351f05015b7da55669aec85295537abe94f
SSDEEP

192:qFX/x+tHlOGY2YuiNJMIiyx6D93UDOiLa2Dv:qlktHU52YuiNKIiyx6xiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042c9629d8a6c846427d1b82fd0897f587fd4f55cfca0ff5369dd89f5b80df2c_NeikiAnalytics.exe

Files

042c9629d8a6c846427d1b82fd0897f587fd4f55cfca0ff5369dd89f5b80df2c_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

7b3fdb0a6daa6e2734bd1c23ddb5c6ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cawinexf

cawin_mbsstr
cawin_mbsDecode
cawin_utfDecode
cawin_mbsdec
cawin_mbsinc
cawin_mbsncpy
cawin_mbslastchar
cawin_mbschr
cawin_mbsupr
cawin_mbsicmp
cawin_terminate
cawin_setlocale
cawin_setLoadOnDemand

msvcrt

strncpy
malloc
free
fsetpos
fgets
fgetpos
strncmp
sprintf
sscanf
fclose
fopen
_initterm
_adjust_fdiv
_access

Exports

Exports

GetNextKeyParam
dmsparam
msiparamex
sxpparam
sxpparamFree
sxpparamex

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ