537f81d2d60889f7b9122c9a66cc3f10_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

537f81d2d60889f7b9122c9a66cc3f10_NeikiAnalytics.exe
Size

3.6MB
MD5

537f81d2d60889f7b9122c9a66cc3f10
SHA1

c8c804800066b306964c1822d4739ce90e985f95
SHA256

bb6f0da9e2cfd1eaf6ffe57828c813c09c421b8f1b09df6e70e0b3fef8c2e863
SHA512

997bbd7659d52971527a7f30ec20f07300b42e28a285fc12f700c5e82671fabe8fb475189c81ec65f9df0bb40b6db311fbab4e19909a81fa740426c248729227
SSDEEP

49152:ksgY1bXNn4iM1mo7JFAU9YfLxd4cY1DJmXTHX1bLu1LriJzf64iVDJEE:5gwrNn4Yo7Lefb4cY1DY5bL4Lrc7NaJZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
537f81d2d60889f7b9122c9a66cc3f10_NeikiAnalytics.exe

Files

537f81d2d60889f7b9122c9a66cc3f10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 36KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ