3601a500c05073c70bd5bcf335f75d40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3601a500c05073c70bd5bcf335f75d40_NeikiAnalytics.exe
Size

63KB
MD5

3601a500c05073c70bd5bcf335f75d40
SHA1

583d0efd0e676b86f98c3967b1948747df804bbd
SHA256

a7d9427f0f8a7311ffc481b8804c64b6047a80bffe7e95aeca32b10226eda41d
SHA512

b3efc660ab768776671d291a3eb8ad004886d89e419d200d44ed3fda33083bbc2228285022877ee96af923c8e8ba32127f7ee367d04b1f3eb4119c46ebe62236
SSDEEP

1536:rYEXnKr+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:rZXnKYHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3601a500c05073c70bd5bcf335f75d40_NeikiAnalytics.exe

Files

3601a500c05073c70bd5bcf335f75d40_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

870f586cf4a46a28f9114d8b32000eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileW
DebugActiveProcessStop
InterlockedIncrement
DefineDosDeviceA
UnregisterWait
ConsoleMenuControl
CancelIo
ReadConsoleInputExW
GetNextVDMCommand
lstrlen
OpenJobObjectA
GetConsoleAliasA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE