55045d91c59ebf3f90c6a9f3bdd5e850_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55045d91c59ebf3f90c6a9f3bdd5e850_NeikiAnalytics.exe
Size

8KB
MD5

55045d91c59ebf3f90c6a9f3bdd5e850
SHA1

c5bb6d3e46a69705c793ae85a1d6733b8c41887b
SHA256

a89ada1176afb79fc41052bf3eb8d1d2b465a064137bc191c3f3426b51d75f0d
SHA512

49fd4d78fb1611fb9356c0b8fff9178abbf3b43df65c3b51f488a24764739487d07aaa1809881aac0c7b147d12b972c4e47893548394924dfd116f55fc9f7d73
SSDEEP

192:+LR1paUk5+hKORp+N6ap35EvYnvtzh+NBenfKdqt:+5aU1hKOffoJ+cvNhnq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55045d91c59ebf3f90c6a9f3bdd5e850_NeikiAnalytics.exe

Files

55045d91c59ebf3f90c6a9f3bdd5e850_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ