849cf72b2d81a992c86c08cc77b973b0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

849cf72b2d81a992c86c08cc77b973b0_NeikiAnalytics.exe
Size

3KB
MD5

849cf72b2d81a992c86c08cc77b973b0
SHA1

cc663d2d7433210aadd4fcd0ec7d7a197d53329c
SHA256

a22fd2fcc5572f49997a38c31b4fd5194c32e60829b7a5b03ed65b9a9b1618a4
SHA512

4487f9c3e1d46b1af46e47ce4b51dd555401f6d3b957a4c64498aaf0f56533581feefa00c3a19866838a5f8b5e61f93680a8ce52920cd71a38f3c8db033b9d6c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
849cf72b2d81a992c86c08cc77b973b0_NeikiAnalytics.exe

Files

849cf72b2d81a992c86c08cc77b973b0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

c6e178be34127c8097845ce737850e45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
TerminateProcess
GetCurrentProcess
TerminateThread
GetCurrentThread
GetModuleHandleW
LoadLibraryW
GetProcAddress
VirtualProtect
TlsAlloc
TlsSetValue
TlsFree

msvcrt

memcpy
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 480B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ