edb31339030f8ca815844d1ac285c5d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edb31339030f8ca815844d1ac285c5d0_NeikiAnalytics.exe
Size

6KB
MD5

edb31339030f8ca815844d1ac285c5d0
SHA1

f8f206f7cae3e8f82a6ab672b194ba429f8e0747
SHA256

d2176868248033000c084e8ab2c64562eecb643b5bde866f2c01af6642501b04
SHA512

5e22c4158d4683a9e005d7ea2c2169671de5f1461aea169efc8fce27f1bf1b44557efc7f9c9d747affe1a176c5162c874287e5bee06ab85c3dbc4221b61f5b1b
SSDEEP

48:Ss0vOiamaF9wJqkECrhWR00scqn6dq8xqZ+C4lV4sxOnMUsagxOt1aj3tW1xWxXJ:z0I9wZLrY0//ZEEHn/lc9WyaZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edb31339030f8ca815844d1ac285c5d0_NeikiAnalytics.exe

Files

edb31339030f8ca815844d1ac285c5d0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

01c41bde2e28b577655077042a01522f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 369B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ