0abea14125bbff79f0af0b60a0ceec40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0abea14125bbff79f0af0b60a0ceec40_NeikiAnalytics.exe
Size

72KB
MD5

0abea14125bbff79f0af0b60a0ceec40
SHA1

9a11f7a348ab7627699df68be7856e03a0d2b8aa
SHA256

b6e4143ded0bb86569d19075680f04025615a4794e092f60cb5f96ac9ee0af4a
SHA512

d6127d234e298e6518826f10813da0a4edf3d62d5438d3839182706d506fe350a558328a5f68b06eefc131add12211bb529059a38ef6c417d1f452b5d5555dbd
SSDEEP

1536:x4KBnQAAya0fCCZQvG+PNqnD0VaEoESg4uANZ:J5dDEkCSg4uCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0abea14125bbff79f0af0b60a0ceec40_NeikiAnalytics.exe

Files

0abea14125bbff79f0af0b60a0ceec40_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE