cf88eaa3a6fdccc27239d3e3a017c7f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf88eaa3a6fdccc27239d3e3a017c7f0_NeikiAnalytics.exe
Size

5.0MB
MD5

cf88eaa3a6fdccc27239d3e3a017c7f0
SHA1

11d900aabbce4a418ba96d812bf10fcd8272133c
SHA256

e0a851500a8333d60b48ee45b76a0dbaa2962037eac077826300e3e7cf3a9ed9
SHA512

3cb28780f1fe5ea0cfb10ff667f307c2360630eb58f5d79ea6e462651e0e8087174d4a76c5dc0968ddbec714c3071c3a580b30e5e134faf90892342df0a5e24b
SSDEEP

98304:bao7qB6QZHGEn+SPzzmw3p6wVbPbMaXuEAagYihV5159g3XXsYmWwFx:GFMOHnXT3p3FbMgu/Y6V5re8Y9wL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf88eaa3a6fdccc27239d3e3a017c7f0_NeikiAnalytics.exe

Files

cf88eaa3a6fdccc27239d3e3a017c7f0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\anyadmin\Documents\anydesk\release\app-32\win_loader\AnyDesk.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 18.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dummy
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ

.custom
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_MEM_READ