1ac89ab9f044a477576cf931162310f0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1ac89ab9f044a477576cf931162310f0_NeikiAnalytics.exe
Size

753KB
MD5

1ac89ab9f044a477576cf931162310f0
SHA1

ebefbe3028753289be04eda299ac2c7071d19b91
SHA256

c1126f5ea55932872663a27e0b01561871d1b6d3f50fc7f50a775f349f7fb7f8
SHA512

ce4c96b0e1c8af30804adfbf037d2761770b03eec6197fa873735e35527ffb473b41e81cd2e48019f8172458ff109588db3ebf2354653918372ab1da9162a46f
SSDEEP

12288:RWOINHuqdTvkLOLvnvUy6TS4FQ9xZEAOBUVmiiN9rYQJBx6LJz8Lkc:bJqdQL6n8y6On90lNRJBxE4gc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac89ab9f044a477576cf931162310f0_NeikiAnalytics.exe

Files

1ac89ab9f044a477576cf931162310f0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GenImageFile
GetRootImagePath
InitDll
PostFileToDB
SaveFileToDB
UnInitDll

Sections

CODE
Size: 667KB - Virtual size: 666KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ