441c8a553044bdff993465dcec02f920_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

441c8a553044bdff993465dcec02f920_NeikiAnalytics.exe
Size

6KB
MD5

441c8a553044bdff993465dcec02f920
SHA1

8781bcf3df8118e58eacb9290e13c13357ab1ea2
SHA256

5e035ef8def16bfca64ae00ef35a9d5a52bc6635e1de56bbd15e38f5c3797676
SHA512

216ad84103117fbefb3fde8bc76d4265b5b1b4b9495e6be2569376c070ac18c091f1d44d7ab037fd3b8060a1dbe43272b8e57a11c8d6cc336e7d3ab6dcf9b27c
SSDEEP

48:68s5Y/P0gUt4dB3on+dGndm/EKes+bsO3JeGah0NsMGXjuIh2XVY3c6aq/qmevg5:h/Pi4l/9+lDWMGXCk2+M6cvg483

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
441c8a553044bdff993465dcec02f920_NeikiAnalytics.exe

Files

441c8a553044bdff993465dcec02f920_NeikiAnalytics.exe
.exe windows:4 windows x64 arch:x64

a7187f68541b20eb42ae0fe9f18557e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleCP
SetConsoleOutputCP
Sleep
SetUnhandledExceptionFilter

msvcrt

system
fopen
puts
fgets
strtok
sprintf
printf
fclose
__iob_func
fflush
setlocale
exit
signal
__argc
__argv
_environ
_XcptFilter
memset
__set_app_type
_controlfp
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ