ea2ea5dccffec399f2957e7ce0d87980_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea2ea5dccffec399f2957e7ce0d87980_NeikiAnalytics.exe
Size

1.0MB
MD5

ea2ea5dccffec399f2957e7ce0d87980
SHA1

f800d99a27092f781606b6f7c5b23e9b79455385
SHA256

cbcdaeeaffe5288ba03ca490824cfef75cd12102c81c361ac4872ac6bf29b0d1
SHA512

fa3b3eb6f988f249638f08ae1b590e57833ccc0161ec141bef5ee79c33d045ae5daabb6b9240581bf7df57beff85783499ca6a6199a67f98544fa874902c42fc
SSDEEP

12288:dE9ibVcTMnHYsABDQZ9IxthNP8LSN7Y3D8aSVaIzXefbCDC5fJPpftG0u96Ottrj:d8SOMYs6Q6tHUc7YT8EHEC5fJPp40uj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea2ea5dccffec399f2957e7ce0d87980_NeikiAnalytics.exe

Files

ea2ea5dccffec399f2957e7ce0d87980_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 530KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ