8cd133633c72515ad47ea861a0c70240_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cd133633c72515ad47ea861a0c70240_NeikiAnalytics.exe
Size

6KB
MD5

8cd133633c72515ad47ea861a0c70240
SHA1

df8294653c57bb43accc6f5c3e20de7d28ab51c9
SHA256

52fadceef8cc1a158bc02fed8cf7ee6a02b6149070575ac8694daaf719a5e102
SHA512

00e96be3b6daf10a9627e128d18fb508ac9caabe200023cb0a4f87ebd15eb66c8389628e23cb2dcc9189f267c0b124f9987ac18a0f684aaf64c08b83bd6d55d1
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIzaut2TXfTgEDUXv:unSR6bgYHut2TPTgSUXv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd133633c72515ad47ea861a0c70240_NeikiAnalytics.exe

Files

8cd133633c72515ad47ea861a0c70240_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ