3d67e4351637149ec3ff866aa051be60_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

3d67e4351637149ec3ff866aa051be60_NeikiAnalytics.exe
Size

63KB
MD5

3d67e4351637149ec3ff866aa051be60
SHA1

a146348d892daa6c41378fe7a03205861b8d7b55
SHA256

0a745641281e491f9d68c2d6dce318a361f1f16e8a726d56248405703eec3dd6
SHA512

847d3f9027e88d6f6961806dcffb4efe5003ab05883d4c92e9235c84973ab86e8830a8a298289e1ceb30db17a23b66d690bdec0187667fcf23ddca1f057de416
SSDEEP

1536:wtuq5vwwL9fH+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:wtR5vwwL9fEHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d67e4351637149ec3ff866aa051be60_NeikiAnalytics.exe

Files

3d67e4351637149ec3ff866aa051be60_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

affc0a4c1437389f905a90266b1b6421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoExW
OpenConsoleW
DeleteTimerQueue
WriteFileGather
GetCPInfoExA
CreateActCtxA
GetCommMask
SetVolumeLabelW
SetConsoleNumberOfCommandsW
RtlFillMemory
GetCPInfoExA
CompareStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE