131619e7a4aef06dfcca6fde63ddbbb0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

131619e7a4aef06dfcca6fde63ddbbb0_NeikiAnalytics.exe
Size

789KB
MD5

131619e7a4aef06dfcca6fde63ddbbb0
SHA1

624d2ba9c7f0d78e026d6dda07965674f773b9d6
SHA256

953bba2b573e5c954dbf11ff54850ab802c1e994b8c72371e1c98653adcbde9e
SHA512

f7ca6a69c5f778072ad9beb091177d53ec5e970be60dc86f43f154b31db0f2e4d26612319cfbe7c29ebabd4d34fdbafcd6e26c54cfad1684c1388b21fe5342fb
SSDEEP

12288:TX1T0cB4QWTSxRcMGB/Gg7bd4uX1HwuYRr/sV23QdWho36knj19h:TFlLWTI65B/Gg7baucRAV1j3VnR9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131619e7a4aef06dfcca6fde63ddbbb0_NeikiAnalytics.exe

Files

131619e7a4aef06dfcca6fde63ddbbb0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 940KB - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Shared
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ