a395dad8b3f200025297f491b73b4df0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a395dad8b3f200025297f491b73b4df0_NeikiAnalytics.exe
Size

5.4MB
MD5

a395dad8b3f200025297f491b73b4df0
SHA1

febe93c5d8341f56909a9a2f86b0c0b71919d143
SHA256

8550b2ce8bb9e04a817b9a7ec5934e7f8a4b9ac0d6d0078e307dfdc80d61c10c
SHA512

f3023a2eb0da4e767bd773549fdb2766755aef4d2f680d6659825b0bb4c1c66451e26e4523e19b712be0812c8c705acbb9769570a8e6b6ef205d5bb3b8158470
SSDEEP

98304:mRpjLfN6LM+iUhPWfPwMKH2Q8WYuWZmH9KCPo2XkWu1jwyYcPDFbv1:qfUvP8MHXRQmH42UWEDx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a395dad8b3f200025297f491b73b4df0_NeikiAnalytics.exe

Files

a395dad8b3f200025297f491b73b4df0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ