441fdfe7505b2f09e57af21455c58f1eb081dcafa513fcefab1d9e6d80b60c5f_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

441fdfe7505b2f09e57af21455c58f1eb081dcafa513fcefab1d9e6d80b60c5f_NeikiAnalytics.exe
Size

5.4MB
MD5

e347854fd9532652a22c5c000e4421d0
SHA1

3dc25215a163da8adcf16c3e12b446deee606df4
SHA256

441fdfe7505b2f09e57af21455c58f1eb081dcafa513fcefab1d9e6d80b60c5f
SHA512

f33ec4608f3883a66b014ca1f664637d962700c0f4c5def69b9a7a97e152fecceab684a2fcde65c6f1ed4cd4c8a29f9edf47da3793695e66d9fd729ce059eb5a
SSDEEP

98304:EI6PZ0tIqz/4RLDnkgqd+Riif0uUDhuFHduHeoOU3tUDE6ONID9bP24:EIOZ0twCciifUUOeNE+9bP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
441fdfe7505b2f09e57af21455c58f1eb081dcafa513fcefab1d9e6d80b60c5f_NeikiAnalytics.exe

Files

441fdfe7505b2f09e57af21455c58f1eb081dcafa513fcefab1d9e6d80b60c5f_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

dc3153a7db02cb5093d49abaad0ff797

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

WidenPath

version

VerQueryValueW

ole32

CreateStreamOnHGlobal

comctl32

InitializeFlatSB

wininet

HttpSendRequestExW

shell32

SHFileOperationW

comdlg32

PrintDlgW

winspool.drv

WritePrinter

winmm

timeGetTime

netapi32

NetWkstaGetInfo

Sections

.text
Size: 5.2MB - Virtual size: 34.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE