6b0232cdd384609f2542479a03098a30_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b0232cdd384609f2542479a03098a30_NeikiAnalytics.exe
Size

63KB
MD5

6b0232cdd384609f2542479a03098a30
SHA1

6e8e25d6b4be009fe8f5db649daa1f133856e424
SHA256

8658b92c8acbd6aed788da4f2f37e0e0bc01656fa2d7c413235538311cb97c1d
SHA512

96a91e322d24aeb15b63ad148867856ff4b64165d2363e18a79ca643d8659b3d8f38474ffa4568e9da8a02a68db8212befd6d8546ac83c45020326157fcffd8b
SSDEEP

1536:7dBk9ZNDdPZhzL+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:mZNDdHz4Hwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b0232cdd384609f2542479a03098a30_NeikiAnalytics.exe

Files

6b0232cdd384609f2542479a03098a30_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1409addc42e14675c3569486cd1483a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
GetSystemTime
BaseDumpAppcompatCache
SetClientTimeZoneInformation
VirtualQueryEx
BaseCheckAppcompatCache
SetEnvironmentVariableA
ConvertThreadToFiber
LCMapStringA
GlobalAddAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE