a9f15add16882ff3eca8928c7179c60e92f33550d74d587522e782f80bf4d58d_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9f15add16882ff3eca8928c7179c60e92f33550d74d587522e782f80bf4d58d_NeikiAnalytics.exe
Size

41KB
MD5

be77b3df398aef2e498ce97519b6a800
SHA1

dfd6bb7c3740ff6d60bcf0c2783ae04a0d0c77ea
SHA256

a9f15add16882ff3eca8928c7179c60e92f33550d74d587522e782f80bf4d58d
SHA512

a2529c85d68553dac635662fc162484c40c4f0b99d8f7c78154e6f24199bb6a4cc44a2124a1b97adc6d2964ebbbd83d4c7d3d9801ef0ac76e3e489f58ab041ff
SSDEEP

192:Aqh4X+WT9UpCBNK/JX4uOuAfKsHhy8V5xZE58emxy07TGqlGMyWkHhy8V5xZE58J:Aqhw+sKp0rB7T2K/ZGzrB7T2K/Z1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9f15add16882ff3eca8928c7179c60e92f33550d74d587522e782f80bf4d58d_NeikiAnalytics.exe

Files

a9f15add16882ff3eca8928c7179c60e92f33550d74d587522e782f80bf4d58d_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ