07bc5cd4f0935150672837d17d18b820_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bc5cd4f0935150672837d17d18b820_NeikiAnalytics.exe
Size

1.5MB
MD5

07bc5cd4f0935150672837d17d18b820
SHA1

b2dc119ff3a8ae8ce9c5bf45a5d27e96ba3eb03b
SHA256

24592b158cc7fbcd24bfab298bafb6f4e2ccf348b248f637dce1a39d8879c702
SHA512

8b4252ce5180da958fe163345ecd12350600fc3e0f7518adf7b0c148fda3bb66f059b32fb61846153c6db26b498701361789ab2a7ef79b1a627aa3c1aec3bad9
SSDEEP

24576:7lSa1RL9P/oXSaG/4/izRXTOkMtrIceMaFPjkjD29crRoNk7BZp9:Y4ArG/akOElMaFLkTrRokp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bc5cd4f0935150672837d17d18b820_NeikiAnalytics.exe

Files

07bc5cd4f0935150672837d17d18b820_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\dd\vsproject\xmake\XMakeCommandLine\objr\i386\MSBuild.pdb

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbgmap
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.il
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ