58c0ab94a113426e6d791e8afbd466d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58c0ab94a113426e6d791e8afbd466d0_NeikiAnalytics.exe
Size

9KB
MD5

58c0ab94a113426e6d791e8afbd466d0
SHA1

aab34f369b275323b604f7164e694c1a54952d8f
SHA256

f181686cf5a21db9c1e1dd14899a1b4d03c8852e6ee3d4b6af347e85af3bde90
SHA512

3a829bfcf25ac1ee876a88eb31084ee6a8a9ca8841f78788b184d1c9ed2e81e91e1307aaadd83991b1104bd472e1dd7c61deb9ba683475841381bae80f59e0f5
SSDEEP

192:W86z92h+H2h+nTuLuaft3PtS+psHwRnDYPaft3PtS+psHwRnDYPC:Wje+c+TCJftfk+pDYPaftfk+pDYPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58c0ab94a113426e6d791e8afbd466d0_NeikiAnalytics.exe

Files

58c0ab94a113426e6d791e8afbd466d0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ