138b83bd00d605058a070a9dc5a36520_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

138b83bd00d605058a070a9dc5a36520_NeikiAnalytics.exe
Size

51KB
MD5

138b83bd00d605058a070a9dc5a36520
SHA1

26af4c702c8462e95ed4d764aed8a81fbab3563a
SHA256

2c8a587d2d830be4d297e43c93c49a6c1d51dfbecf7345acfcb8fe0fb9d7962f
SHA512

1e038b6597045f8cf9f34c4d0034ec4ecb8dce378439b2b28761349bb3bef905fb03f5f820ee45d35f441fa3edcfb35e9fe6b716bda40314669dd3d844cf718e
SSDEEP

1536:OlFC0Wl+pHwXEa61XMZCeEn7AxBRAZqVAKl:eC0WiHwo8soECAKl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
138b83bd00d605058a070a9dc5a36520_NeikiAnalytics.exe

Files

138b83bd00d605058a070a9dc5a36520_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

ddc23a1b6714f6eb933653d237d509fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreW
SetConsoleNumberOfCommandsA
GetCPInfoExA
OpenWaitableTimerW
GetModuleFileNameW
SetConsoleInputExeNameA
FindNextFileA
ClearCommError
lstrcat
Thread32First
CreateDirectoryExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE