1e6f0858dbaf70117b29d03cbd29f61ca6d5105b39f2d816d48f092f32a2ed5b_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1e6f0858dbaf70117b29d03cbd29f61ca6d5105b39f2d816d48f092f32a2ed5b_NeikiAnalytics.exe
Size

732KB
MD5

b4e735cc68600aad988aed02f77c03b0
SHA1

eea087cd4265b65461ce5c80856b124af3861213
SHA256

1e6f0858dbaf70117b29d03cbd29f61ca6d5105b39f2d816d48f092f32a2ed5b
SHA512

f00358050f2c2be8a361cbf15139cc28cdb8b2ba6bc10e3d85a479d005e31c13fe2c961ff989868d407af45cb45f190f48ff6e5b7b6e74cc6328584cb9ac6925
SSDEEP

12288:JnCSRm0gP/xVoBUQUX3lxmcs0jaKE+sqdTSSwcGXGg6mE3a4phWOlgFZBu13MwUo:pCemnPZVo+Xit6deSwcGXGhmE3a4OFZA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e6f0858dbaf70117b29d03cbd29f61ca6d5105b39f2d816d48f092f32a2ed5b_NeikiAnalytics.exe

Files

1e6f0858dbaf70117b29d03cbd29f61ca6d5105b39f2d816d48f092f32a2ed5b_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

3ede871f504dee75b485f08c01cf3ea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 555KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 20KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 1024B - Virtual size: 131.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 1024B - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 1024B - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 1024B - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

11
Size: 1KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

12
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

13
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

14
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

15
Size: 45KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

16
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

17
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3ede871f504dee75b485f08c01cf3ea1

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 555KB - Virtual size: 1.3MB

1 Size: 13KB - Virtual size: 24KB

2 Size: 20KB - Virtual size: 60KB

3 Size: 1024B - Virtual size: 131.4MB

4 Size: 8KB - Virtual size: 8KB

5 Size: 69KB - Virtual size: 72KB

6 Size: - Virtual size: 4KB

7 Size: 2KB - Virtual size: 8KB

8 Size: 1024B - Virtual size: 879KB

9 Size: 1024B - Virtual size: 879KB

10 Size: 1024B - Virtual size: 879KB

11 Size: 1KB - Virtual size: 879KB

12 Size: 512B - Virtual size: 4KB

13 Size: 512B - Virtual size: 4KB

14 Size: 512B - Virtual size: 4KB

15 Size: 45KB - Virtual size: 70KB

16 Size: 3KB - Virtual size: 3KB

17 Size: 7KB - Virtual size: 28KB

0
Size: 555KB - Virtual size: 1.3MB

1
Size: 13KB - Virtual size: 24KB

2
Size: 20KB - Virtual size: 60KB

3
Size: 1024B - Virtual size: 131.4MB

4
Size: 8KB - Virtual size: 8KB

5
Size: 69KB - Virtual size: 72KB

6
Size: - Virtual size: 4KB

7
Size: 2KB - Virtual size: 8KB

8
Size: 1024B - Virtual size: 879KB

9
Size: 1024B - Virtual size: 879KB

10
Size: 1024B - Virtual size: 879KB

11
Size: 1KB - Virtual size: 879KB

12
Size: 512B - Virtual size: 4KB

13
Size: 512B - Virtual size: 4KB

14
Size: 512B - Virtual size: 4KB

15
Size: 45KB - Virtual size: 70KB

16
Size: 3KB - Virtual size: 3KB

17
Size: 7KB - Virtual size: 28KB