70842d4498942ed5a1e0620976e637f0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

70842d4498942ed5a1e0620976e637f0_NeikiAnalytics.exe
Size

10KB
MD5

70842d4498942ed5a1e0620976e637f0
SHA1

a35fb8de00f7247fda2827a4f5eec001a4c6ae3f
SHA256

1152df2ed32b28d8bbd134efe505a5dda078f70d61832b4dc0ce34fde7fc22c6
SHA512

cc3892c0a2687a567e549416af2ad9f88e5c653491ae7b47e58292a8ec8bb99baa402f3a50fde10d8b94c9d7d11fc7e995c33bade1e788078105bc9034f891f4
SSDEEP

192:W86z92h+H2h+uFV9fwpVfpnvEZ3CBCS5UU3uTOhKUbUbVG7TVWbZTmQz9fwpVfp2:Wje+c+8atTKUbUcUwAatTKUbUcUwPoCs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
70842d4498942ed5a1e0620976e637f0_NeikiAnalytics.exe

Files

70842d4498942ed5a1e0620976e637f0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ