2713c31b6c23c5f384467a5b1350c540_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2713c31b6c23c5f384467a5b1350c540_NeikiAnalytics.exe
Size

634KB
MD5

2713c31b6c23c5f384467a5b1350c540
SHA1

49b393b0099fa8c365a824247f01a314d23ef1b6
SHA256

1d9b50740702f1275ba9a87783a50a68d24e13820b60c2b6851b98294a251ae8
SHA512

7676f4fa62708bfc0bcb3199b771f2312203c72c586cc1f066e060490dabf4acab91566d3785294fefc49ede96fd285c73a24d3e063f9912af2cb8ad9a1f8b82
SSDEEP

6144:IooZIFH5nmz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1Z:ISF1A1gL5pRTcAkS/3hzN8qE43fm78VF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2713c31b6c23c5f384467a5b1350c540_NeikiAnalytics.exe

Files

2713c31b6c23c5f384467a5b1350c540_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE