1f15c91b70ee6ec2ae95cfa5e1afa8f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f15c91b70ee6ec2ae95cfa5e1afa8f0_NeikiAnalytics.exe
Size

1.9MB
MD5

1f15c91b70ee6ec2ae95cfa5e1afa8f0
SHA1

f1198ccf8515fbdba4cd6db68033e86f8f969a58
SHA256

6a9c24cb4e8cb6e14b5079ecda3067ef8a89abdf14b6d0b1c8bae02288e668d6
SHA512

6052352d9a46aa98b5e43f29aa02194a33b2ba7044b02fd9d55ab17587288e629d06253d29577bfb557d9144a73f51b0f6672a25eba19b27889b0e76c8e942fd
SSDEEP

49152:OLLCtzvr9Y7WWT1V2zyuIeRSYKBhB7vo+B:84Y/TXYyNeRALxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f15c91b70ee6ec2ae95cfa5e1afa8f0_NeikiAnalytics.exe

Files

1f15c91b70ee6ec2ae95cfa5e1afa8f0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

a8a25a738f1e435fce3493ab3022aa81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFullPathNameA
DebugActiveProcess
GetTimeZoneInformation
GetExitCodeThread
OutputDebugStringA
CloseHandle
LoadLibraryW
SleepEx

setupapi

CM_Disable_DevNode

Exports

Exports

JeehPeeaeor

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 182B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ