6a9c5d63acb31003a5febb41a3eb71c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a9c5d63acb31003a5febb41a3eb71c0_NeikiAnalytics.exe
Size

27KB
MD5

6a9c5d63acb31003a5febb41a3eb71c0
SHA1

43dba1e7de27b309469ea7e4c7e2d17cec3939d7
SHA256

c4b74ea99c3ac9b4698b86a40c99e734a1665eb3effb342086d4597d3f1b0078
SHA512

de7fc671b77a1ff331ca797470f95114fe86466b0b1c5a7189a738d5cdb3c5337a2e1af824ffe82707bf39d2967a4d988439f31c8f62fba487cc90f6d59b7a9e
SSDEEP

768:A524Kwmc4GdrMA+X82/nTV+b8I5+O3P7d6LNZ+/qkV9VKblxQta/cVC4l:O3vD+tpDqkZ+pHwXEa61l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a9c5d63acb31003a5febb41a3eb71c0_NeikiAnalytics.exe

Files

6a9c5d63acb31003a5febb41a3eb71c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

3d050fe95bb198505cfa8a53c9cfd1ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
UnregisterWait
SetConsolePalette
Module32NextW
GetVolumePathNameW
RegisterWaitForSingleObject
AddLocalAlternateComputerNameA
CallNamedPipeA
RemoveLocalAlternateComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE