1d731e0227f26139f8b520acfcd72980_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d731e0227f26139f8b520acfcd72980_NeikiAnalytics.exe
Size

102KB
MD5

1d731e0227f26139f8b520acfcd72980
SHA1

64a029bed9e42a0383121c84bbe40e70fe1d7b01
SHA256

ef320d809d230c7b72f4141e03867fb4ee5c2e62b7d89cc950ed2e450e28dd9c
SHA512

65e5e5b1a77f1e0a83f3a3f1d9d31565610600643f0032f7d6f7ec5d13e9c898b8b0ddb24561fc1d0faab0633ca422e14668426480ef1d641d223b11c9f72144
SSDEEP

3072:p0A04rWpcOPxPke+e3fFpsJOfFpsJbgEU0A0v:+FPxPke+eIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d731e0227f26139f8b520acfcd72980_NeikiAnalytics.exe

Files

1d731e0227f26139f8b520acfcd72980_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ