9e7ce91d7e1236e12ef7fdc7fd44dde6bda49c73913370b8d4d533348c8fe306_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e7ce91d7e1236e12ef7fdc7fd44dde6bda49c73913370b8d4d533348c8fe306_NeikiAnalytics.exe
Size

7KB
MD5

b6d44ffa78263e91760931b65b9c4db0
SHA1

c6e025907dd5cf78c546bbd1d9a4dba4a4cbb2d5
SHA256

9e7ce91d7e1236e12ef7fdc7fd44dde6bda49c73913370b8d4d533348c8fe306
SHA512

c5b8fbf20630f92c3d6487669ac408c553b46032204bd5136ea4cc06fd2110beed4f1eeb73a3e14dc5d45cce2eca00de372e4447446b606009914545b5250154
SSDEEP

96:FkfLuAx2WmE36e07v03GJsBo+cw5WpbsetYctPDxIe91D:FkSC+E3S4CXPlDxIeb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e7ce91d7e1236e12ef7fdc7fd44dde6bda49c73913370b8d4d533348c8fe306_NeikiAnalytics.exe

Files

9e7ce91d7e1236e12ef7fdc7fd44dde6bda49c73913370b8d4d533348c8fe306_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

a330ab4571994ddebf91be7a95f5c0d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
GetTickCount
Sleep
CloseHandle
CreateThread
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA
CompareStringA
InterlockedExchange
RaiseException
FreeLibrary
LoadLibraryA
GetLastError
LocalAlloc
GetProcAddress

user32

wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset

Exports

Exports

winampGetInModule2

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ