8406dc4f9f6b4dc4f78635bdb21bd6c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8406dc4f9f6b4dc4f78635bdb21bd6c0_NeikiAnalytics.exe
Size

4.4MB
MD5

8406dc4f9f6b4dc4f78635bdb21bd6c0
SHA1

01c6142953861aaaf1ca02064f5e01b2d2105060
SHA256

3d7c1417974572635b55946793387147fb812d1e477048333189e2e7ff10f3af
SHA512

f7f89f6b564e502f3ec960084e3bc0d8e10167bd34dec770407b39c53810f91ef53bc2834279a61fbcffa1c47c4178c910b9ef121586d0f4ea2076005f633461
SSDEEP

49152:1lc0nugJkl/ec9mNC5Lc6qwvC7tZnw1zr2sP2sn8AMt/MPoTi93zXNnRa0d8cQ7B:fpFw/e/Dw67Aq/1i9h/8cQ7+tMQo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8406dc4f9f6b4dc4f78635bdb21bd6c0_NeikiAnalytics.exe

Files

8406dc4f9f6b4dc4f78635bdb21bd6c0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 777KB - Virtual size: 777KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 709KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ