32dbcf0f7f84c76224477c9b819cb130_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32dbcf0f7f84c76224477c9b819cb130_NeikiAnalytics.exe
Size

720KB
MD5

32dbcf0f7f84c76224477c9b819cb130
SHA1

65cd94d413cec5c46791acc066837f10bcc99b05
SHA256

801c9f5a141418514265d7ba8591df319949a8fd057867334d2e1b03da3cfa5b
SHA512

ff86e967389b4f59f391436ed6e5e23d96d27f8e0117aaa1f692f750d7c837dce74d7ad9748d696acff3e9796d4b4c1f145879f99c870d1c860685d1dc5e06db
SSDEEP

12288:3l2CWctWdh9MZzWzDxThe7tkN+PrXOcmFFgOkyU532WTh0tFhfa3L:5WT9+WvxleZFPjO7KX53RTh0tFda3L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32dbcf0f7f84c76224477c9b819cb130_NeikiAnalytics.exe

Files

32dbcf0f7f84c76224477c9b819cb130_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 400B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ