5e42bbcb779ebfebb50daf8cfeb3d3c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e42bbcb779ebfebb50daf8cfeb3d3c0_NeikiAnalytics.exe
Size

251KB
MD5

5e42bbcb779ebfebb50daf8cfeb3d3c0
SHA1

97f94cdfd23de767c65d16343e90accee6447cd3
SHA256

23e13c95f7c298008a0db1ed1feaea7bbd9cd4be5c4ddb327abae0aad819f6d4
SHA512

0bab225d8a54423b73d20cb46b8dc00c038dc0c702caa30c5c11739a19ee9d53979b212d62f9dc72e6205b0de04a138ee5d2a5c3190d19820e4f6bb50c5206ab
SSDEEP

3072:PvGNjwIf5n2BPc2ERCrCyozf9G0p9bByIz6UC6XTBfRAPy7j+oeQvSp:Pv4Phn2+2ERJ5L9GqexyXTBJdKQvSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e42bbcb779ebfebb50daf8cfeb3d3c0_NeikiAnalytics.exe

Files

5e42bbcb779ebfebb50daf8cfeb3d3c0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

a9bb303eaa7b888b7ba39c65b5b191e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetTickCount
GetCurrentProcessId
GetLastError

msvcrt

sprintf
getenv
_purecall
free
strtok
_strdup
wcstombs
memcpy
memset
malloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

F1

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ