aa259f1c4724845ad47f59bb9eaee9c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa259f1c4724845ad47f59bb9eaee9c0_NeikiAnalytics.exe
Size

314KB
MD5

aa259f1c4724845ad47f59bb9eaee9c0
SHA1

71fd672fefc9d9db419ec6be589a53638b9a7125
SHA256

cfacf81c1f819565313600f4dd6d835f06fb7cdbdb5b01edaf2c029fe8d4e757
SHA512

cb6761da01ae72fe6a19075329769d0c8010d24e4f0cd7e3359a40b7e8e44eaec975279dd01ae88e2697395e17dd2dca1498f3e0f3443fe622698ee01ec7778f
SSDEEP

6144:e1lBXuUJ+Qo4d6PkB0Qt+7RXlR98nW7Ve6neBfMm:bis4d8kBelD676n6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa259f1c4724845ad47f59bb9eaee9c0_NeikiAnalytics.exe

Files

aa259f1c4724845ad47f59bb9eaee9c0_NeikiAnalytics.exe
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GPBExecutePack

Sections

CODE
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ