234e0033564e74be59cf75e3094d7b60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

234e0033564e74be59cf75e3094d7b60_NeikiAnalytics.exe
Size

74KB
MD5

234e0033564e74be59cf75e3094d7b60
SHA1

a872fd0c44bdd87677905564bebfb9071a98afc3
SHA256

19b8b2382adb3d8f7108353ec5b7247bdfe42a5914d2a80f222c46078c84a722
SHA512

85547536317c055417f2b7e741d513dca80b3e99887ab7d26dd3cc2de87aaac7b55eb733242e11731ada0274891fad354fe3e8b7f997909680d66d8fa20747ee
SSDEEP

1536:17R6Pxu3Vqk9qTbWRe3b9eS+SRo7MUkTt4:mxuFpybI2H+0sI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
234e0033564e74be59cf75e3094d7b60_NeikiAnalytics.exe

Files

234e0033564e74be59cf75e3094d7b60_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE