e5fd29d6f41d7b9e5f7f338393579970_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

e5fd29d6f41d7b9e5f7f338393579970_NeikiAnalytics.exe
Size

48KB
MD5

e5fd29d6f41d7b9e5f7f338393579970
SHA1

32e8c9097ee794b0039c23b7b3d5328e44d42919
SHA256

6e75b5975ca04326d97711fb971cdddc346775f0a2bb4320cb30e58ab4bb8de0
SHA512

e2407867dc912d1c889b4cc293c305faf4e22a789130d7635c73d5a2da0a31ec278dbd63af2aedd57db5f993c7a0fe812e9cccb0a0338dc7bb43e607c8e4fb76
SSDEEP

768:34zwPfXR+/sMKNqnZEBDWkzyMEZxJPZouHyQPUG7yi8H0:zSvZE52NJ1H+G7y10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5fd29d6f41d7b9e5f7f338393579970_NeikiAnalytics.exe

Files

e5fd29d6f41d7b9e5f7f338393579970_NeikiAnalytics.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

GWXWU.pdb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ