291cf3c5c0386ee0b4429cf9990b4150_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291cf3c5c0386ee0b4429cf9990b4150_NeikiAnalytics.exe
Size

641KB
MD5

291cf3c5c0386ee0b4429cf9990b4150
SHA1

91e67c5219483aec13889f37889c2318500cdbff
SHA256

35b63bcaa5a84524fe6617b5a5ec14cc16f0173757d5fc33d7f29c2b4bd94665
SHA512

2d55c810ea43329d0bd0a3cec675c52764d900435d55c54cbce8ea4b7c1716c7f8c5e6cca017946dc88315273599e1c3d228d9328854692f4d67b88cb653972f
SSDEEP

12288:bHL2iaX5PZB+fF5KOMKfcM0hYCPdG77e7E52eFVtdgxV1:bHSi0xYF5FMr9Jlme7E52eFCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291cf3c5c0386ee0b4429cf9990b4150_NeikiAnalytics.exe

Files

291cf3c5c0386ee0b4429cf9990b4150_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ