5b8178e42f2fa317af33c06f52806c90_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b8178e42f2fa317af33c06f52806c90_NeikiAnalytics.exe
Size

812KB
MD5

5b8178e42f2fa317af33c06f52806c90
SHA1

48ebe04df81b94a3d3bb81abd5a5c962deed95af
SHA256

d8b407740edd7b759948ec53fb38a864e9d61c977084cfbf06503f3b98bb2537
SHA512

abfc39952c8a869f57bdea017f607a271ed568cbdfb39f4704ec851f788258956900c8f3112ba98ee95c255ce8987158c34a07a9fc51ae9c337742454a626f0a
SSDEEP

12288:2pq/C/2OGAtkCP4vFjGSOpRK3CGY1BjvrEH7m:2pB/2+ttPlfpRK3CGY7rEH7m

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b8178e42f2fa317af33c06f52806c90_NeikiAnalytics.exe

Files

5b8178e42f2fa317af33c06f52806c90_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 84KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE