1b081bc6ebdc304f81fdb74f4c24f3c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b081bc6ebdc304f81fdb74f4c24f3c0_NeikiAnalytics.exe
Size

32KB
MD5

1b081bc6ebdc304f81fdb74f4c24f3c0
SHA1

c37062e6e6fbb6893be7dcd0d5a2fbf24bd8a984
SHA256

84b5862eb4026e611cfa39026a11f589c28e57d273991b696dd4456ed960c005
SHA512

d72957806089f8061d06868d3abcbd0e068b7d0a3c8c2dcea779abb9ef0cbb9ffed6f949d22b64354b3eab73e829f11fa5c4b919f28ed5065c9816baba2e18df
SSDEEP

48:IlVisguX8C8oEOPohIDZWi9zdcUcloQm62Y:IDi7KPocWMfjyF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b081bc6ebdc304f81fdb74f4c24f3c0_NeikiAnalytics.exe

Files

1b081bc6ebdc304f81fdb74f4c24f3c0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

Exports

Exports

DirectPlay8LobbyCreate

Sections

.text
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ