d10a0a44ac668ad4e159c16ece7593a0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

d10a0a44ac668ad4e159c16ece7593a0_NeikiAnalytics.exe
Size

65KB
MD5

d10a0a44ac668ad4e159c16ece7593a0
SHA1

b96d58ddea48243df9779c831b36d0a97c3bd09b
SHA256

40d7b968c508404f5662be724451d457e221b27efb9302e4be257f3b1972520b
SHA512

e14cef7e8fedc34312aadb42156cd8b11a54fcfa6cd898ba20d2fbb571e8cb38d12a009ccb08e30d5d90bfd4af8fbf00ce3f908307e845cee1e0ad0c6551f9d0
SSDEEP

1536:L0c6Ya6M53imDfW991QQ5dSoBxYRwr30Fpb+4D5K3TPVXOD:oc6Yar5u1Q0CCcpS4gU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d10a0a44ac668ad4e159c16ece7593a0_NeikiAnalytics.exe

Files

d10a0a44ac668ad4e159c16ece7593a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ