4e0668f1cca7a20d8dad68a3f449f580_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

4e0668f1cca7a20d8dad68a3f449f580_NeikiAnalytics.exe
Size

64KB
MD5

4e0668f1cca7a20d8dad68a3f449f580
SHA1

f78e6b7f4ab4da2a064b15b254b88ea849f4b7b4
SHA256

fec8d8bdf98d4bb6f044d694d0a3771a9a9648239f62afc552336628a62c5ef2
SHA512

7ab4a93f766e2e89b55726cb393cfa5d446c3f35f4be68372a4cbfb09b6aec2218ec12fec797acf5948ec2e168cc8a46a8fb35d1a078d0453dcf2f33f4ed9a68
SSDEEP

1536:D6rdW5XkcSkzsSQHI4wb0VyFR05z+uDXdV2KRaY4wn:DBBSkfxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4e0668f1cca7a20d8dad68a3f449f580_NeikiAnalytics.exe

Files

4e0668f1cca7a20d8dad68a3f449f580_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

00dbdae2c04e663066d085ed815435d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetCurrentDirectoryA
GetProcAddress
ExitProcess
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ