0d0bf54488a8b05c195daaf90c82c990_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d0bf54488a8b05c195daaf90c82c990_NeikiAnalytics.exe
Size

72KB
MD5

0d0bf54488a8b05c195daaf90c82c990
SHA1

74c05da77d4fbd5bed01e5d1a54f80fc063b5887
SHA256

030a79785a110f7592c0d368502177b1e2c2b9e41a8b635bf780518675d6c3ab
SHA512

ae8d8dd86177f7004cab6bd659c6530bf088b198456ec0f4adee13a68253b13943b6981a2c55f7a100202ee2149480b61d18617a18de95f2abd812bb7f7c920e
SSDEEP

1536:x0MoWELkdEwt74R6QJro0857l+bMxNs2QWCFued:aMoWKkdEi74RLo0uaumjued

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d0bf54488a8b05c195daaf90c82c990_NeikiAnalytics.exe

Files

0d0bf54488a8b05c195daaf90c82c990_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE