fbaf1fa907bc65c2473afa1007ede600_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbaf1fa907bc65c2473afa1007ede600_NeikiAnalytics.exe
Size

634KB
MD5

fbaf1fa907bc65c2473afa1007ede600
SHA1

bdabcb68392c4c3899d5babcbf87fcbb27547a8c
SHA256

8b4958029aa3e4ccf9fde02b5a021b39e7c86452b810654f074ab3b302ded762
SHA512

11688be29ae59efa93fac96f47c431ad7f4efd565fa3c369d8dbec8a754d3c317b9e66bae0578ea2069e0462b0a9d480cbd93c0ac0fdf640165def6863fdeacc
SSDEEP

6144:IooZIFH5nZz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl19:ISF1B1gL5pRTcAkS/3hzN8qE43fm78VJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbaf1fa907bc65c2473afa1007ede600_NeikiAnalytics.exe

Files

fbaf1fa907bc65c2473afa1007ede600_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE