a3a8665909e26b98f1ca66c9ceba2690_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a3a8665909e26b98f1ca66c9ceba2690_NeikiAnalytics.exe
Size

53KB
MD5

a3a8665909e26b98f1ca66c9ceba2690
SHA1

0087c1961ea1a111ba0656e8b2f0f700379b2639
SHA256

629349b4d35efdfc173f89a4416a33844fe0d867a4a8be1d204e7897795b6a02
SHA512

fcfb1e6447952cfb4f370943edffb1fbddc756775f85b9dfa13827e61183ea455d70101199171599163710f464a449d3446202ef84e070cd7996ae1d45733908
SSDEEP

1536:W0P5a46JOot2p3SBE09FX/S0Zgpqo9h2V4S3tuu60TSNKRXFwfL+SbqfsUmsJvY7:tWabRyQA03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3a8665909e26b98f1ca66c9ceba2690_NeikiAnalytics.exe

Files

a3a8665909e26b98f1ca66c9ceba2690_NeikiAnalytics.exe
.exe windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ