112860098441b8ccc2149794a8d19a40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

112860098441b8ccc2149794a8d19a40_NeikiAnalytics.exe
Size

65KB
MD5

112860098441b8ccc2149794a8d19a40
SHA1

5ae5195e339b6588576e59a094717667fbcb7060
SHA256

806de0e1f4f3cb849d9675e625b96c2e00ef7c2a8da7eb62154f57715e6630ab
SHA512

3bd6e3634fc4cb24d6cd123143b3abcaa003f46138816641ee6cd06f2d564c0fd272d83101e751199ee5bdcac93f6d0b37ac7c793a4a6c3cd01027a2e981ea5b
SSDEEP

768:ErzFpKDiX7BvFOWTkaynH+ER06JryAj/4PpUkCgq8/C8SUxee:E/7FFHQ/H+GxQP0aK8xl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112860098441b8ccc2149794a8d19a40_NeikiAnalytics.exe

Files

112860098441b8ccc2149794a8d19a40_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE