81901c804292d0e288fb390982f34800_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81901c804292d0e288fb390982f34800_NeikiAnalytics.exe
Size

244KB
MD5

81901c804292d0e288fb390982f34800
SHA1

0f7fa8a7cee55d411a4bee7cf75e757f045fef46
SHA256

44e50d292f60d77d266078c6b95b6941907aef2ebc7233642c703bf98f18913b
SHA512

4e03ff8fdfd6d905b6b59e6d5091f42b852a2178185639cb6490fe11ee7d26c7f4c349909ccc1273ac782fabb5b9de49d09728026a8dba14618990764a330669
SSDEEP

6144:anD/BTbumWKNykG9K0zpHD9M/OY75tXjR2pZ/WSGJh2E:anzWKgLJCnbjwZuSlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81901c804292d0e288fb390982f34800_NeikiAnalytics.exe

Files

81901c804292d0e288fb390982f34800_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ