1273fa5fffae8cf974bb0ed3061e1f40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1273fa5fffae8cf974bb0ed3061e1f40_NeikiAnalytics.exe
Size

659KB
MD5

1273fa5fffae8cf974bb0ed3061e1f40
SHA1

97ceb2fce4dbaad96a2b0aaea0ec46cdff9bf242
SHA256

efe21642db27d4b5a9d6b5eabb19a2ba4e1d13f8a96a7580eca15047b340c767
SHA512

cb7b3b7a25dec379e9955ca23631914c9abf3c9ddffa08c3887bab85d7942ac89b64b57d5813f458945dd99e063c04aeaac60c3d70a29016dc87d3c759aaaa36
SSDEEP

12288:YX+9w78ram/BfkkHQ08KsRsVzaVtSCUco6P:HkAhQ0bsRsVzctSC/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1273fa5fffae8cf974bb0ed3061e1f40_NeikiAnalytics.exe

Files

1273fa5fffae8cf974bb0ed3061e1f40_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ