ec11acbbc10bf92100b283ede9a7bab0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

ec11acbbc10bf92100b283ede9a7bab0_NeikiAnalytics.exe
Size

6KB
MD5

ec11acbbc10bf92100b283ede9a7bab0
SHA1

1615f4eb42a4e101e012bd041ebdf95ba7bc180e
SHA256

906d46d6145f06f859e43c149ba96ab0ac1d219de47d678f04a6114a0abe94b7
SHA512

4f884172c81808fb96985a92ee167c57bd93713feea5fab60858d0ca5e707ced384fb44614559b5e11e9fb5be56e3115830e5d870eb00200e50d12047a9cc171
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHhzKXved4RX2H4XZUziRWrqmX2a:nEY2RrF1eqwi4lEved4h06ZUup4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec11acbbc10bf92100b283ede9a7bab0_NeikiAnalytics.exe

Files

ec11acbbc10bf92100b283ede9a7bab0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ