3b946a57bbd719f93349832f96699770_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

3b946a57bbd719f93349832f96699770_NeikiAnalytics.exe
Size

63KB
MD5

3b946a57bbd719f93349832f96699770
SHA1

89c85fa2242202393e3385db2f8a80ce65ae2895
SHA256

bf337d54d85e511bbd76152ea7367cb2409b29b1b7294bc67ce1aaf1f44f1696
SHA512

635c9575da0330dc1873a8ed611fb2adeb49a090071c96b73dff696e903756aacc6e84c80dbc2a09bddb28d1db84ee8b49bd739114ad8a6e3ffb1308cde9caf7
SSDEEP

1536:1iJS+3TT+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:sJBwHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b946a57bbd719f93349832f96699770_NeikiAnalytics.exe

Files

3b946a57bbd719f93349832f96699770_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

882caefcc0d24b14214d8caa57aa4c2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommModemStatus
WriteProfileSectionA
SetStdHandle
BackupRead
CheckRemoteDebuggerPresent
GetCPInfoExA
GetNumaNodeProcessorMask
GetSystemWow64DirectoryA
GetVolumePathNamesForVolumeNameA
CreateSocketHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE