28410eca5b0d950b43cd23a611ffa140_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28410eca5b0d950b43cd23a611ffa140_NeikiAnalytics.exe
Size

8KB
MD5

28410eca5b0d950b43cd23a611ffa140
SHA1

d3fb0bf435e5097020100fae47887d6e41596563
SHA256

c44d372c92627c944c4c1fadc009dac3eb2442bb2c3d080a677a418b34c9a07f
SHA512

86d2e64682eca999fd4489e321a1d1c348cd80432e67df4e3e1bb30964e10ba512287ec42b4b76a724854e7930b761c755ef85502e6afc67d68294796e71d7e6
SSDEEP

192:rLg+vpAUy5SK4RNSLN6f0CZz+wEZ8OZzv82yRDmWsGKJcp9VYY:r/AU/K4zff0Cgwe9vclm0XVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28410eca5b0d950b43cd23a611ffa140_NeikiAnalytics.exe

Files

28410eca5b0d950b43cd23a611ffa140_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ