143ab1359054d9bb4c0d0ab7ae2f8950_NeikiAnalytics | Triage

Sharing

General

Target

143ab1359054d9bb4c0d0ab7ae2f8950_NeikiAnalytics
Size

826KB
MD5

143ab1359054d9bb4c0d0ab7ae2f8950
SHA1

112f211c09d2ea9296ac508914320187326c411b
SHA256

eca65e00ad66139843456d64a4d5eb82f73e6c0a379e96d76cd33fab5402542b
SHA512

01398acd48a357db67ed8757e7d494278ac7a91dcbd3537bb124626a3a418b5cd54aebbd403d30ebe39c2f6ba843e32097884280813d0f5966190d3bda903a38
SSDEEP

12288:tMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V90t0rD:tnsJ39LyjbJkQFMhmC+6GD9Cw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
143ab1359054d9bb4c0d0ab7ae2f8950_NeikiAnalytics

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

143ab1359054d9bb4c0d0ab7ae2f8950_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ