e4ed927a5199700de36fc14a8e320310_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4ed927a5199700de36fc14a8e320310_NeikiAnalytics.exe
Size

76KB
MD5

e4ed927a5199700de36fc14a8e320310
SHA1

c30bf95b6d6c850082550cac80a0da9794132494
SHA256

69087bfd3e3130aa93391838a0b8e2d3fed9a1b3759187590bd7c474950d8e18
SHA512

44e381ed831b7b481a4a26bf67afbd3846ac434a600a3aab7ea04d6e62ce88e38845fa17dc8cb983b822e26dcc410168624b8704703a826477ca20622339196f
SSDEEP

1536:nqqqkgTlcs+ZHyugf+vUu5GgdXxxeE6rzwVKySUfircKD01njEErxTWDTMqhGKYw:7Bgf+cCGgdveVrECy4cJjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4ed927a5199700de36fc14a8e320310_NeikiAnalytics.exe

Files

e4ed927a5199700de36fc14a8e320310_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

9790119c9300e95b0f0cc6261c7267e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProfileUserMapping
FileTimeToLocalFileTime
FoldStringW
GetNumaNodeProcessorMask
DisableThreadLibraryCalls
CreateMutexA
WaitForSingleObjectEx
GetCalendarInfoA
FindFirstFileExA
EncodePointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE