5e137d923ea2e214771cc00a7c733e20_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e137d923ea2e214771cc00a7c733e20_NeikiAnalytics.exe
Size

73KB
MD5

5e137d923ea2e214771cc00a7c733e20
SHA1

2d656e79f5b95613419b8a29ec90f720a748a6ff
SHA256

3ebaabd0cb19db25c0d78d52040c4dd7262f5e1bf57329536d997d636e146a50
SHA512

2101adf21d8ae66a0c21e91433e4d3adf08e438880f86738f6158a7e01175ca0d817e2dff84ada9bacf2d57d352c9d509b2d55aa4e3f8c60d04e1605588f6312
SSDEEP

768:hZZ6Zyf96vmAziy5BoC9wpS+t3Bj1ChBuQKKRedCSG7AGvMpe2GXnvjLhlfl9u/n:1Q9Cdp1lmBubDdvGwpRGXnv3h42+YW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e137d923ea2e214771cc00a7c733e20_NeikiAnalytics.exe

Files

5e137d923ea2e214771cc00a7c733e20_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE