a6ebe65cf4a0d63216365d4cd6581730_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a6ebe65cf4a0d63216365d4cd6581730_NeikiAnalytics.exe
Size

365KB
MD5

a6ebe65cf4a0d63216365d4cd6581730
SHA1

b1a4e35540840f10563efc6af09a826957fb51ed
SHA256

490503ebf170ff495fe57dccffcc4a1a82a0a39306974273dfcf3e1f7b8e5994
SHA512

abde9f5446acf60e295614daacbe663e4d52b00efa512c2f827b3879141f74360f559fc2d664ca66a059fdb6933cfbdb12c9b58b1debe4fc8a6ebc904a19067a
SSDEEP

6144:j2U0XkaWkQ8I9g7Upch87rFS2xkuLLcvOMoKQvDWEWS7GV:jqXUh82xkNeLDWE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6ebe65cf4a0d63216365d4cd6581730_NeikiAnalytics.exe

Files

a6ebe65cf4a0d63216365d4cd6581730_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ