40d7eb1f11990b79f7b8371aab207690_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

40d7eb1f11990b79f7b8371aab207690_NeikiAnalytics.exe
Size

63KB
MD5

40d7eb1f11990b79f7b8371aab207690
SHA1

921c5f08ef0c730349a3b2b8fd9cec2bceff8344
SHA256

490760e8b9bb55ab27ab928c01f2be1911fcce1836fc684b9a018ca836596f11
SHA512

e3ffcc5553a5b28534e5c9e9f6792197bf347239a31f1f8d30b90d9c4f442a229dbbdb2aaacb3c1494dd581d82441584dc28661bcd8ba261e80c7a24717484a3
SSDEEP

1536:3Eo2qwPR+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:3KqwPuHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d7eb1f11990b79f7b8371aab207690_NeikiAnalytics.exe

Files

40d7eb1f11990b79f7b8371aab207690_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

ca7d854d7e9bfe77f15ee80020ab19cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
GetSystemTime
FindActCtxSectionStringA
DebugBreak
GetCompressedFileSizeW
LocalUnlock
GetConsoleFontSize
FatalAppExitW
InterlockedExchange
HeapSummary
SetThreadIdealProcessor

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE