0a225765b7bf75eb696c58c827193720_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a225765b7bf75eb696c58c827193720_NeikiAnalytics.exe
Size

9KB
MD5

0a225765b7bf75eb696c58c827193720
SHA1

b211f49e4ff538c25ca964bc197ecff9396d65af
SHA256

b814419d1ad3dd626d564c937637405ff490f9b80b3fb2272c7dffe36d0550e4
SHA512

13e371f92dafcd5b779e1a440bcf8bc10096498bcb3a0902924e2a87ab9e64364d95a3c1a48f1680532f7b9f1ee18b75b860b58fc3cb4a5a3164bf45a8611902
SSDEEP

192:2jLvomKpbUTt4XNi0xGPIm1jl6eCDV1ZdebIkwPx0w0qW:g6bUO9TxGVgRDHebCZ0w0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a225765b7bf75eb696c58c827193720_NeikiAnalytics.exe

Files

0a225765b7bf75eb696c58c827193720_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ