13bc59058423cac08efc697122eb7960_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

13bc59058423cac08efc697122eb7960_NeikiAnalytics.exe
Size

634KB
MD5

13bc59058423cac08efc697122eb7960
SHA1

4fbe32c974b787bc3c9d2a054bf1637b8ee63e9b
SHA256

13c6739044712c2356a45cc38f39664270f5b03a3aa2cc20ec71d9b8506390f8
SHA512

4b53ee042a0b4f3ffc3af22e0baf0fcc1bd89edbddd0bc8ba23f40689943517726fd3fae48a02f2b95ed347b80f7fefb4132e86ec155af3ddf190e92ef34f54d
SSDEEP

6144:IooZIFH5nsz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1e:ISF1C1gL5pRTcAkS/3hzN8qE43fm78Va

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13bc59058423cac08efc697122eb7960_NeikiAnalytics.exe

Files

13bc59058423cac08efc697122eb7960_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE