3bb86f3b31adbb42d9ce8af4220cb070_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb86f3b31adbb42d9ce8af4220cb070_NeikiAnalytics.exe
Size

2.9MB
MD5

3bb86f3b31adbb42d9ce8af4220cb070
SHA1

c8a613f8183d54c7497f12e0b6a71ed2216836c0
SHA256

1ec1d33b6d494ffeb2db8f00a0a045d26fc9b4a71c83a22e61e1f0ca2985532d
SHA512

73bf499cddeb1f4ecfda31f2148522c32bb2039c5f0050a6b0a80be5ff40f4d8334d1d53a66fe1ede52a351f0590559755e7843fe58d366c57b22f6657fc5fea
SSDEEP

49152:8eODv0g7mM+M6RkMkIM7I067ewnNTBsWWhipXqSDkYOMwwnMb4PmyV:8edM+M6RkMkIM7EPoTYOXwnS4rV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb86f3b31adbb42d9ce8af4220cb070_NeikiAnalytics.exe

Files

3bb86f3b31adbb42d9ce8af4220cb070_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\setlang.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ