bafffb83819db52ee8531abf1a8bc0402d3f9b17230fadf38adbe1afe14d9ffd_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

bafffb83819db52ee8531abf1a8bc0402d3f9b17230fadf38adbe1afe14d9ffd_NeikiAnalytics.exe
Size

17KB
MD5

33a4a56441a40c27444c6dcea60350b0
SHA1

7fae4cdaf6aeb676392bfa2efef15731c49fdd16
SHA256

bafffb83819db52ee8531abf1a8bc0402d3f9b17230fadf38adbe1afe14d9ffd
SHA512

c518f85bad90f03a77e054d4154ff6b0e8a4f08241c37cc81b14dff31ad687cd04369b77842d076fa80d4a4cfe0f685e19897ec1f12178a79f7a5de97831d4c2
SSDEEP

192:nDqeRwdb3enG2RxnSGzTcb7dYMnW0TYxm2pXEz4JWaULI7kbSHkFQc3psZ/Q99gc:DqzdeGQ/TcFPnW0wp0tekWo5s5eGZvXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bafffb83819db52ee8531abf1a8bc0402d3f9b17230fadf38adbe1afe14d9ffd_NeikiAnalytics.exe

Files

bafffb83819db52ee8531abf1a8bc0402d3f9b17230fadf38adbe1afe14d9ffd_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

655be6d4b6825ae7c96140c054e1ac0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExW

user32

GetKeyboardType

Exports

Exports

AssembleApplication
AssembleModule

Sections

.text
Size: 11KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE