21c6c6a80bcc9dc4e98789243f7e2ca0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21c6c6a80bcc9dc4e98789243f7e2ca0_NeikiAnalytics.exe
Size

48KB
MD5

21c6c6a80bcc9dc4e98789243f7e2ca0
SHA1

1474b3d7bb1581d8099bc5979d937965804f2cd9
SHA256

4b504535a192fe79c0b173b5cf6bcc45aaf7413fa9a3327515e2d388c891962c
SHA512

91bb27752679431b433f656ffdcc8aaaa0a8babcc3b53dd1f9ebb2f93ef9012cb311f175fabe345d16c1da19b46820d61ee1464d9cc94daa5d1d9dd319205734
SSDEEP

384:aJ8o6EkM8lrMxN3/mj3vQ4NFeiFLNrrTLq0qSpyCvLQcqn+A1QK8pL9Mcj2kf4y4:nB/8n9yJoQl9LkZLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21c6c6a80bcc9dc4e98789243f7e2ca0_NeikiAnalytics.exe

Files

21c6c6a80bcc9dc4e98789243f7e2ca0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

76ba55ae695bab3dac8d5048e75c9326

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
free
malloc
_initterm

kernel32

GetProcAddress
LoadLibraryA
GetLastError
InterlockedExchange
DisableThreadLibraryCalls
LocalAlloc
FreeLibrary
RaiseException

Exports

Exports

unidagen_crea

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ