742ea93cdff1f9ab1e4c77bbc1996840_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

742ea93cdff1f9ab1e4c77bbc1996840_NeikiAnalytics.exe
Size

6KB
MD5

742ea93cdff1f9ab1e4c77bbc1996840
SHA1

6d0e95e8392037b1741cafd1cd025e152d7a312e
SHA256

25c5f2745ce6b402d6c6b3f3aa5790868837bee9af5bded7e458539d2bd7d15e
SHA512

cdfed06bddece2ab261270aaa1d7ebd63ca3c52636854dc833c812f1fa9df17a8e22f0c6f837f64a400f7779d83438b906e7f37bc7ac094fdb5c4e10f1f58377
SSDEEP

48:CCy86+Wet9Q/iooHeiefhe+/lSMYEq+AArajdtRWGfajk11gsKy5pLpL+Mac5yq5:hy859x0P8MaE5t/71Lsbw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
742ea93cdff1f9ab1e4c77bbc1996840_NeikiAnalytics.exe

Files

742ea93cdff1f9ab1e4c77bbc1996840_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ