d66eede689a70d38866f9caf6f3f1310_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d66eede689a70d38866f9caf6f3f1310_NeikiAnalytics.exe
Size

72KB
MD5

d66eede689a70d38866f9caf6f3f1310
SHA1

3bb109f094552ef355c3fa59284bdde8b53796a6
SHA256

d4520ee39c4cdb1c12012e05422eb936dbbbf68bd13100f326c0e2445147541a
SHA512

5473a0041992aee8103e94e149b1cd244b7fdf3c4d512c71fcffb4b4a0af75544c1f92e24520381a9363ebf670718316caf0688e35dcf6052f431d376ba09cde
SSDEEP

1536:xLUZP5UOEbZKaIzzRghmoJHla5jxLt5b4GCa5Si:iZPDEbEehmJCaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d66eede689a70d38866f9caf6f3f1310_NeikiAnalytics.exe

Files

d66eede689a70d38866f9caf6f3f1310_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE