afff402d3ae5520df6c69953672d1e39d1428046f8880f7a87e12d120b23ff93_NeikiAnalytics[.]exe

General

Target

afff402d3ae5520df6c69953672d1e39d1428046f8880f7a87e12d120b23ff93_NeikiAnalytics.exe
Size

74KB
MD5

74d6becf7a3c8949ac2c098c62febf40
SHA1

1c4e03f053bff1dd0dce50e7a3f4652afadb072e
SHA256

afff402d3ae5520df6c69953672d1e39d1428046f8880f7a87e12d120b23ff93
SHA512

420006fcdbf1bdff554fb40377b24b147955a9b3e9bff1b7f7c8c87b2f13434775c551eb0554c214902e3d27d1cae52baba6bb286d53618c77f6ee6734003415
SSDEEP

1536:DMhYPCoAcxHbCi1Rf/MM3tmR9mSgNsUed3MZLX9UPke:Dy6CoAaDSgNs5kuke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afff402d3ae5520df6c69953672d1e39d1428046f8880f7a87e12d120b23ff93_NeikiAnalytics.exe

Files

afff402d3ae5520df6c69953672d1e39d1428046f8880f7a87e12d120b23ff93_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

22d3476a93f81fac3c39bf88d6aef2ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
DeleteFileA
lstrcatA
lstrcpyA
ExitProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
VirtualAlloc
HeapAlloc
LoadLibraryA
SetFilePointer
CreateFileA
ReadFile
GetStartupInfoA
GetCommandLineA
GetVersion
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
HeapDestroy
GetACP
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
HeapFree
VirtualFree
RtlUnwind
WriteFile
GetLastError

oleaut32

SysFreeString

ole32

CoUninitialize
CoInitialize
CoCreateInstance

user32

EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA

comctl32

ord17

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

22d3476a93f81fac3c39bf88d6aef2ea

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

ole32

user32

comctl32

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 11KB - Virtual size: 24KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 28KB - Virtual size: 30KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 11KB - Virtual size: 24KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 28KB - Virtual size: 30KB