1eb6fce6779fe16e912d1227c3e92860_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eb6fce6779fe16e912d1227c3e92860_NeikiAnalytics.exe
Size

20KB
MD5

1eb6fce6779fe16e912d1227c3e92860
SHA1

1bbd9efa27935dd8975cf632be306fcae1f34968
SHA256

dacc0b774c8dc6f296d2462293ab06407cc93cc5c120be4098e06ee396b6d328
SHA512

1c370be8732704fc64e6af64210ed732d0c3cf4e58a710438db6b0f749f4334ecbeab2a810d44a9120c65ae4cef641827c58fa29c8178a2e3b961fce8d191acc
SSDEEP

96:vCcdTvTvTvTvTvTvTvTvTvTvTvTTFk4KiM6WYMN40yCf9Kr:Cr36ChT9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb6fce6779fe16e912d1227c3e92860_NeikiAnalytics.exe

Files

1eb6fce6779fe16e912d1227c3e92860_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

96a8ec412858a637750b430c36c75b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

DisableThreadLibraryCalls

Exports

Exports

MMX_addshab
MMX_addshab_cykl
MMX_anding
MMX_binarize_16x16
MMX_close
MMX_close_image
MMX_ind_setup_table
MMX_open
MMX_open_image
MMX_scalar
MMX_scalar16
MMX_scalar16_
MMX_scalar36
MMX_scalarUni
MMX_scalar_sq
MMX_scale

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ