246212bdcc47ed08fa48da91b8e386b26190b3028def877b3c512da065b672a2_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

246212bdcc47ed08fa48da91b8e386b26190b3028def877b3c512da065b672a2_NeikiAnalytics.exe
Size

642KB
MD5

f068015178ff12c8d2c26eada3356350
SHA1

4685a44863d319355e6b9d71d5434f07f2dec5be
SHA256

246212bdcc47ed08fa48da91b8e386b26190b3028def877b3c512da065b672a2
SHA512

c809d180c7ebd5a5899721d8cbde5bd80159ff1c8afe0dc2012b8449dac90e82430e874fce077bd62610eb0a101860be275cae83cebb849ff7d3090bd4c324a7
SSDEEP

6144:nWb7EN9YBZRL369Z3Lr9aVn7ZNqy902M0sN2gmVBHLttttttKKuL:nW+uBL36/7h27RquYVmLLttttttKKuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
246212bdcc47ed08fa48da91b8e386b26190b3028def877b3c512da065b672a2_NeikiAnalytics.exe

Files

246212bdcc47ed08fa48da91b8e386b26190b3028def877b3c512da065b672a2_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

6e01dc42d3a299971e5d7173d5b81a3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

OpenClipboard

gdi32

ExcludeClipRect

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

ioctlsocket

comdlg32

GetSaveFileNameA

Sections

.text
Size: 271KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE