2d1d4f55b71001da26ab6184625b7b10_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d1d4f55b71001da26ab6184625b7b10_NeikiAnalytics.exe
Size

63KB
MD5

2d1d4f55b71001da26ab6184625b7b10
SHA1

5d6e54fbd8adf2d473664c3f613848698cf9c49a
SHA256

12f61665cb236a598bd6a151815945266315a2039aa9516eb4719a5161b8ce0e
SHA512

760503092a4092d45d8860cd6f180b0d8ef54de1fc58fb0c66798e77b0ba2a130df93afb364e11104a3f1759ba634080be5e4943620e637ed983e406b1d211e1
SSDEEP

1536:pl0Qt4l8+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:f0Qt4lDHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d1d4f55b71001da26ab6184625b7b10_NeikiAnalytics.exe

Files

2d1d4f55b71001da26ab6184625b7b10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

c9583709f2b7ac80c67c6572b887594d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateActCtxA
TlsGetValue
GetSystemWindowsDirectoryA
LZRead
CreateMailslotA
CreateThread
GetCurrentProcessId
VirtualFree
GetNamedPipeInfo
ExpandEnvironmentStringsW
OutputDebugStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE