5ca36f488fa08f1beeb4a7eef18ab410_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

5ca36f488fa08f1beeb4a7eef18ab410_NeikiAnalytics.exe
Size

62KB
MD5

5ca36f488fa08f1beeb4a7eef18ab410
SHA1

92f5f50309dda80ab32467a491c6b9ba3e396ab5
SHA256

cec3f0c44c1843d47355b3e9c1e9aa048e9b1147b257bdb43e5f5ed6b59236c0
SHA512

c58e6d1d538203edfa11cd3836a2caa8023657bdd08eabd6c7954b0b1a2fcb5411da13814d2e615ffcf925b7d9a03a2348192f65af25c25133897dcd8f26d5b6
SSDEEP

1536:t6hF+9MqBB9cwLfxq2XL9RCEy7tgrO6PwHxF:8y3BB9c+fxHXLxit/tD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca36f488fa08f1beeb4a7eef18ab410_NeikiAnalytics.exe

Files

5ca36f488fa08f1beeb4a7eef18ab410_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

58017a2beb86014550ec014302404334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextChangeNotification
GetConsoleOutputCP
BaseElevationPostProcessing
QueryThreadProfiling
EnumSystemLocalesEx
GetCommModemStatus
BaseCheckElevation
ReadConsoleInputA
SetEnvironmentStringsW
OpenConsoleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE