596c1e097e739508ae3ef74ab9c25790_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

596c1e097e739508ae3ef74ab9c25790_NeikiAnalytics.exe
Size

10KB
MD5

596c1e097e739508ae3ef74ab9c25790
SHA1

9ee2e74968aac5de59ee6dcd982a7ce56ce8cb7e
SHA256

3147d1329e8572258fcc1912b0d4a2949bcae6a763fb0201e694b0ebea2c93c3
SHA512

c9a2ce063e6814e3c73d0b9917e3acfcb928cf517fe4b317a79feccce85dda0a44851b5fba4155e8b8878f3b004f4fd4453701bdc618676362803cbdfac89306
SSDEEP

192:x+tirDYU1hPTuSoI1xuHQzqRAMGqsXLe7RXPIKJKrKhebsvs8XTO82:xEbCXiA2hTK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
596c1e097e739508ae3ef74ab9c25790_NeikiAnalytics.exe

Files

596c1e097e739508ae3ef74ab9c25790_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

3b146726bdf40901431046690d3d7177

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

carclw60

GOL$A8
CARC__ExitInstance
GOL$C2
GOL$25
GOL$FILLDATA
GOL$85
GOL$52
GOL$COPYDATA
GOL$COPYFILL
CARC__StopRun
CARC__EnterInstance
GOL$55
GOL$VN_ASCII_SIGN_TABLE
GOL$58
GOL$D5
GOL$M5
GOL$S8
GOL$C8
_CARC__LibraryMain@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RCLID_TE
Size: 1024B - Virtual size: 1019B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCLEP_DA
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ