12e30d33be8629c8c5c2ed50628bce80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12e30d33be8629c8c5c2ed50628bce80_NeikiAnalytics.exe
Size

9KB
MD5

12e30d33be8629c8c5c2ed50628bce80
SHA1

5b81e685bba46e8b420799597f9bf8a8fd9e75e8
SHA256

f8c64c2fac9b73936f19474dd949953a9a2c2de52c617c27694276d402516509
SHA512

e1d10562565d1ec12dc0f1c62d22f3f5a8aef7efd66ef624665dbce93d49f5d78e92a9a6769b3c6af69341374b7e2ec5fd8cdd1078da00f6db252209b41111bd
SSDEEP

192:2ELvjKpbUztW5iE997FWp4660eRMG7teE4C6ScBDPGjJ5dQBAl1K:DWbUa/9RFWHNkr7EE4GcJePK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12e30d33be8629c8c5c2ed50628bce80_NeikiAnalytics.exe

Files

12e30d33be8629c8c5c2ed50628bce80_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ