080d6cb9a1b7d17f5047d64a739a4670_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

080d6cb9a1b7d17f5047d64a739a4670_NeikiAnalytics.exe
Size

25KB
MD5

080d6cb9a1b7d17f5047d64a739a4670
SHA1

ec817d6a722ed59c550b16b7099f46174352982f
SHA256

600b6df1fa279556cb7bfcbba34a3fc80c04e85f0b1923de0318b06b5f1ca955
SHA512

614bedc411f76d5c6f472f9627c5dd525a144235949488214ba37975f8aa4f8c06814bc4684bd4d726834d26eabf2fabada12b1c110f2b1faac3c14b6cbf5121
SSDEEP

768:UBFE+nTSdCrp9GcTkGggzc+CMw1MJt/D:A7nTSQwcTAgQrMw1MHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080d6cb9a1b7d17f5047d64a739a4670_NeikiAnalytics.exe

Files

080d6cb9a1b7d17f5047d64a739a4670_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

17675462038ea893f69cab50d467e3ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
ExitProcess
VirtualFree

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ