2cc5b2989e771dc6efd530fd840bd6d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

2cc5b2989e771dc6efd530fd840bd6d0_NeikiAnalytics.exe
Size

8KB
MD5

2cc5b2989e771dc6efd530fd840bd6d0
SHA1

9d5bb7b3b5c660b0f12d8b2c1671a3bc0502444d
SHA256

bc56c63339c376e8404a90fa2e3e4dea079521fbebf43fdc5ed9881e62f84747
SHA512

1118481d911e7f2cbf84a2927abd6b7275d83dfff3f2cf742570e5175774909bf166cc180f17e5dcd1f1ca5baaef75d959852eae58424170cae53b346568540e
SSDEEP

192:0LTQup2U25vGK6RBWW3N65QOi3Br3wWVq9dd0Lv9WZJ:0gK2UrK6RQJqN3uW0zd0LVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cc5b2989e771dc6efd530fd840bd6d0_NeikiAnalytics.exe

Files

2cc5b2989e771dc6efd530fd840bd6d0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ