9e89ff2aa39f7488a3b060c7c8570d10_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

9e89ff2aa39f7488a3b060c7c8570d10_NeikiAnalytics.exe
Size

212KB
MD5

9e89ff2aa39f7488a3b060c7c8570d10
SHA1

e80d3c8688b7a0db16f938831b42f1b51f60be40
SHA256

227eafc1379561f2bbabacf94a0861f749e6274d78ddb92f52aaf6eea3da512f
SHA512

8718c49ca46b20cd446c4f2da38d709fa2ac79721275cd6052ddfffd07948902e263ae6ed9a70004911a612298f2ce6754ec0f28e7157fbf1a6314bce5148fd9
SSDEEP

3072:uTCDYDg+vr87rnj3WCW2EW51HKKn4AYrBkfkT5xHzR:IooZIFH5n8aQt9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e89ff2aa39f7488a3b060c7c8570d10_NeikiAnalytics.exe

Files

9e89ff2aa39f7488a3b060c7c8570d10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE