0496c6ebb2a506652e9e19fca3a80af0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

0496c6ebb2a506652e9e19fca3a80af0_NeikiAnalytics.exe
Size

4KB
MD5

0496c6ebb2a506652e9e19fca3a80af0
SHA1

41790d6668bf377ba345e287efa51ecf20c468a9
SHA256

4102c2f28a92942e61766c484b0d83e264ca6fe1ac9cb0861598a33bfaa95e22
SHA512

82433b74f15ecb81a1b689939b6080d31c62ae993a78fbcd012bc47c170880c1d85d395d205409143b2428958b9f76b9769f7691cca13ff38778ee9f64c92e7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0496c6ebb2a506652e9e19fca3a80af0_NeikiAnalytics.exe

Files

0496c6ebb2a506652e9e19fca3a80af0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

de4f9c49a7e113707c72d93351cd3e0f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
memcpy

kernel32

LoadLibraryW
SetUnhandledExceptionFilter
GetProcessHeap
HeapCreate
VirtualAlloc
VirtualFree
TerminateProcess
GetCurrentProcess
TerminateThread
GetCurrentThread
GetModuleHandleW
TlsFree
GetProcAddress
VirtualProtect
TlsAlloc
TlsSetValue

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 560B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ