0b6288d51ff5ae1b5a404ee7bbca60d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

0b6288d51ff5ae1b5a404ee7bbca60d0_NeikiAnalytics.exe
Size

5KB
MD5

0b6288d51ff5ae1b5a404ee7bbca60d0
SHA1

016f3c9b65871604f8490e68c7266582b061e028
SHA256

758e4d901c946a2744aeaad28c8f6367c577ca373a1bd636f59f7fbf7152eb3b
SHA512

af9b606fb59cb82d728ebac1dfe2686603bcc9aafa1f06059b799ef6d73d15ed330581411904673d41c193e2d0bbee67ce8faa54acc196d800fc173a069e65f4
SSDEEP

48:SWkO0IoyTnXz+ihZjokGxrf6JQ8SJWuigRp3hvVEK5sbLWEfGMxe7BJa/TKwkHI7:ZJTnXzvokiubuiEp3h9n2WEOpa+BM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
0b6288d51ff5ae1b5a404ee7bbca60d0_NeikiAnalytics.exe

Files

0b6288d51ff5ae1b5a404ee7bbca60d0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ