b8885e63a1ed79d17c7d0917ed0d6fe0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

b8885e63a1ed79d17c7d0917ed0d6fe0_NeikiAnalytics.exe
Size

74KB
MD5

b8885e63a1ed79d17c7d0917ed0d6fe0
SHA1

dc7083d867bf8373a7bf2adce16d0c4390f07347
SHA256

05f5e9d09ffc49f797f0c7f1d595c717b5063e3c8471157ce87d3ccb48244adf
SHA512

62bfbd00490559952a0640bb598b7f1c495aafd9ae11b75c9e49bcd0d8b80a8f22efbdf60ea913177d6ca2741c143872972049de42a7990111e91ade32a178a1
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08FO:14K8Y1XVVkgVdrI7Q3FIskXJY3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8885e63a1ed79d17c7d0917ed0d6fe0_NeikiAnalytics.exe

Files

b8885e63a1ed79d17c7d0917ed0d6fe0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE