66de5bc1fbc4ec5408f5e25c7e63a800_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66de5bc1fbc4ec5408f5e25c7e63a800_NeikiAnalytics.exe
Size

3.3MB
MD5

66de5bc1fbc4ec5408f5e25c7e63a800
SHA1

be3d06ce5aba2fc8b6115d8c2497a52ec330264a
SHA256

5692f427c8f4022e6498014a821908d3fc9787f6e09151d0fcb06edb69b683eb
SHA512

624c9406dad40fe436c84eac12280645603c35e7f40872685efb7ddfeb35b419bc8cf97ed495dd4837db8a76b740374d47423c92bae83247656165b5c57d1922
SSDEEP

49152:dxzP/4MnYYJ2ZhqSGLHkJEM+sNBk9/fw2BwfmM0fgmUi6AjW/MUSdGRf3/WhKPgu:IIDQ+sNi9XwgwfohjxAZWhv7StX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66de5bc1fbc4ec5408f5e25c7e63a800_NeikiAnalytics.exe

Files

66de5bc1fbc4ec5408f5e25c7e63a800_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

appvlp.pdb

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 180B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ