3a66b728beeaae78ab77386a08e484f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a66b728beeaae78ab77386a08e484f0_NeikiAnalytics.exe
Size

2.3MB
MD5

3a66b728beeaae78ab77386a08e484f0
SHA1

ca38de6a57b33a1a4550a5340f762df49ea89c3f
SHA256

0777c46792814d01468cfd8758939a904c1f62c4a5a69f200d39a0511f4adefe
SHA512

9a00dbcb08c77590b2813ae24c7fa4e2d0a9f0c1a7bc22be029202bb5e00439d69fa9c1532a147b33033d6d7ba336bd49ca2e251b6e28bcc33d66aab64e4567b
SSDEEP

49152:g3EZpBh211Waw30XoJdXN0BMOwLloBrugXu:Rr211KFJdXN0B7+slu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a66b728beeaae78ab77386a08e484f0_NeikiAnalytics.exe

Files

3a66b728beeaae78ab77386a08e484f0_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\cnfnot32.pdb

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ