488c28a0cd32e977bfcceb6a2e70bbf0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

488c28a0cd32e977bfcceb6a2e70bbf0_NeikiAnalytics.exe
Size

76KB
MD5

488c28a0cd32e977bfcceb6a2e70bbf0
SHA1

1a6d2bc85b3a91a2f2196b3c8c54745c75cb2bde
SHA256

9e5ce2b00d417f9b01818ee6dc09a8fa3c07937d79158cfd82b1c43c762a71c1
SHA512

3b9b42366a1f51fc52e09f4cb470ba331f59fa54f509b4c3300192c5fc1e8fc61649196e97b8d6718e8676fe4500c5e67df598d80609676aaae4a20263acf992
SSDEEP

1536:grU7IlnFaW9JQ3FAYh8ZlABxEhhx6YpjnBFy11Aw6Zyhirr6XF:SkgnYHfQlAYpjBFy11Aw6ZyhurK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488c28a0cd32e977bfcceb6a2e70bbf0_NeikiAnalytics.exe

Files

488c28a0cd32e977bfcceb6a2e70bbf0_NeikiAnalytics.exe
.exe windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

regedit.pdb

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ