cab8fc0989d36b11888812afd9ee4b20_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab8fc0989d36b11888812afd9ee4b20_NeikiAnalytics.exe
Size

480KB
MD5

cab8fc0989d36b11888812afd9ee4b20
SHA1

b08ffab30f7c7a17c24dbaa1f137706567a3274c
SHA256

aea8e74a63c4bd101ebed7b46202265316060674d6150f6ae7f064b746126344
SHA512

a4d345f57bd0cc923b06ab00ba9cfc1cef6b7d9b1a04fba1df5248bbe6a9af8df8928ee5ebfff70ba892eaec3154b644970ba601222682bb87c94a06946d0a9d
SSDEEP

6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnN:nRDc3yWDNU+YUznzNjElWaT07NQtDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cab8fc0989d36b11888812afd9ee4b20_NeikiAnalytics.exe

Files

cab8fc0989d36b11888812afd9ee4b20_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ