255ff7c7746d10074ff03757111087e0d67f20a52c7a7a003f0bc9d116fb65c9_NeikiAnalytics[.]exe

General

Target

255ff7c7746d10074ff03757111087e0d67f20a52c7a7a003f0bc9d116fb65c9_NeikiAnalytics.exe
Size

84KB
MD5

1061d40015441f1e0ef70f67ac02db00
SHA1

2d941d2fd38e1f871533748059eedb1c9f6a74c6
SHA256

255ff7c7746d10074ff03757111087e0d67f20a52c7a7a003f0bc9d116fb65c9
SHA512

825ff9fe1d5a59d1dc6773c5d9b6fab9d43094889fbd542281b96ed7a6b407c94f66ef78d57a2250a50792f32e13e19d5185f109cd62278cb72ed19bf08dbc71
SSDEEP

768:LcjYVYnmrKKnl5hEXuydJe+shUd7t+ltZ+iB921+Z0NPGr+ogml1+MB3wodb5MGh:UyKKlZ+7d7tCY+Yvo3PHB3zV5MG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
255ff7c7746d10074ff03757111087e0d67f20a52c7a7a003f0bc9d116fb65c9_NeikiAnalytics.exe

Files

255ff7c7746d10074ff03757111087e0d67f20a52c7a7a003f0bc9d116fb65c9_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7f2ec6065303710d48f1cbeb5abe1dc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
WriteFile
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetProcAddress
ReadFile
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
FreeEnvironmentStringsW
GetShortPathNameA
HeapFree
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
CloseHandle
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetEndOfFile

user32

ShowWindow
SendMessageA
SetWindowLongA
LoadIconA
PostQuitMessage
PostMessageA
DestroyWindow
IsDlgButtonChecked
GetDlgItem
GetWindowLongA
CreateDialogParamA
MessageBoxA
UpdateWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
IsDialogMessageA
DispatchMessageA
SetWindowTextA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

ShellExecuteA
DragAcceptFiles
DragQueryFileA
DragFinish

comctl32

ord17

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f2ec6065303710d48f1cbeb5abe1dc1

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

shell32

comctl32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 16KB - Virtual size: 13KB