0478816e9e3a856b96509b744896d520_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

0478816e9e3a856b96509b744896d520_NeikiAnalytics.exe
Size

4.2MB
MD5

0478816e9e3a856b96509b744896d520
SHA1

cf3cc7d1d6f876cc1b945bcb5b92bfa0f863dcf0
SHA256

56c97655f798c811a63226f8c2a483012e7d7bcf9861259d2f0c988fe1e82a94
SHA512

bdd91e9505c553b8f718974fd413c16024214f4db956f73daa47e29f3a027bbebbf174da8d8deda80cb066ba2dde0069544befdd1b81e4ed26932d4d6a62e633
SSDEEP

98304:4rAOt9PZsNi9XwgwfoIJdXN0B7+sBIabjKoh9W:4Dsi9XwgwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0478816e9e3a856b96509b744896d520_NeikiAnalytics.exe

Files

0478816e9e3a856b96509b744896d520_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\wordconv.pdb

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 260B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ