41836f02dc01c9154fe20068b9f9d050_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41836f02dc01c9154fe20068b9f9d050_NeikiAnalytics
Size

1.2MB
MD5

41836f02dc01c9154fe20068b9f9d050
SHA1

116b13785c35a6da1a70149e7032987d13feebf7
SHA256

b985eb6b74cb6725f04ad4823cd9039d092002ee67673d44a587595f567f02ec
SHA512

e9e35a339e54d6ed57f676783ee6e0beb45ecf846171abc4b265aace66e2be6c987977d36a4b39dcd17c89f527de312ca3fd13bac2e6412a0bfc4adc7a4b9889
SSDEEP

24576:sk9+ysR42skLTuNGFIgMYeH8CWXSwjCbeSU/TodfVMdF5Wrqv21z:xkJNe0FIvz8CWikbMdfVMb5TON

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41836f02dc01c9154fe20068b9f9d050_NeikiAnalytics

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

41836f02dc01c9154fe20068b9f9d050_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE