0dddc2e64da79bc800db0007c34bc710_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

0dddc2e64da79bc800db0007c34bc710_NeikiAnalytics.exe
Size

3.4MB
MD5

0dddc2e64da79bc800db0007c34bc710
SHA1

975675ea3d57b555df2f487bf811d7c70a3072b5
SHA256

cbd224977b9743acc8cf39e6cfd4decc0b4397ee6bf473565284823e2697538f
SHA512

9899f33cb1e24f8e8987bb6b51023823ede3c5c98cbb39c581a61d5e6c91608e67c80ef8a377bb1d4959f0e46b05f1232ffbfc568b78dfab63b11ecf64025a50
SSDEEP

98304:xRNhcRNlemriIi0MwI94jJaJ0MPdhXp79AmibNmQn0RVzJ:vL7tFGWPdhXpTQWzJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dddc2e64da79bc800db0007c34bc710_NeikiAnalytics.exe

Files

0dddc2e64da79bc800db0007c34bc710_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

c3499974d5b90a9138e9e6438f2974c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

perl58

Perl_Tstack_base_ptr
Perl_Tmarkstack_ptr_ptr
Perl_croak
Perl_Top_ptr
Perl_sv_2pv_flags
Perl_newXS
Perl_get_sv
Perl_form
Perl_Tcurpad_ptr
Perl_sv_newmortal
Perl_Tstack_max_ptr
Perl_newSVpvf_nocontext
Perl_sv_2mortal
Perl_sv_setiv
Perl_stack_grow
Perl_Isv_undef_ptr
Perl_Tstack_sp_ptr
Perl_mg_set
Perl_Isv_yes_ptr

msvcrt

_adjust_fdiv
_initterm
free
malloc
memcmp
strcmp

kernel32

DisableThreadLibraryCalls

Exports

Exports

_boot_Fcntl
boot_Fcntl

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 941B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ