1d0a4ba605aff84b732f0be140c987a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d0a4ba605aff84b732f0be140c987a0_NeikiAnalytics.exe
Size

27KB
MD5

1d0a4ba605aff84b732f0be140c987a0
SHA1

378901c0a0e566834b1b9063182ba38f24920230
SHA256

8df55e00cefd93a9b925b25c834e7e62cc65a9c674887d0f1ca4b3870e1a0d42
SHA512

3d0e61393d2d9911ae50d86242316e735f39ccd6ba155f1f0218887b7300ee385f8f3496d581f20e73bb7456b32aaaa2725326bd6fbd5416a4f60e9c0d0e9b61
SSDEEP

768:/dsDsDsDsDsW+BmLyAPia4G/rdcs/XyR+Ua+/qkV9VKblxQta/cVC4l:/mAAAAWPZx5vl+pHwXEa61l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d0a4ba605aff84b732f0be140c987a0_NeikiAnalytics.exe

Files

1d0a4ba605aff84b732f0be140c987a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

6df5d5280ebace0ebb519ccd92eed078

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
InitializeSListHead
CheckNameLegalDOS8Dot3W
SwitchToFiber
UnmapViewOfFile
ReadFileScatter
ReadConsoleOutputAttribute
CreateDirectoryExA
VerLanguageNameA
IsBadHugeReadPtr
RemoveDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE