6bc133e9d56f9c24536ac72998cb4f90_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bc133e9d56f9c24536ac72998cb4f90_NeikiAnalytics.exe
Size

4.3MB
MD5

6bc133e9d56f9c24536ac72998cb4f90
SHA1

c80667b7f4c407d00913765cb6e4862fa17c6f7b
SHA256

81cb85bb6bbb74b014819a68f3633085634bb38cfcb5083c25a55e5b05b35416
SHA512

df51778b0bcc1e81b520aa1553dc1d202441e9edcafee15f26aea78e2e411f1fcfb90a30a4180841b61086989f71e03de7de40d06a69edb2b3efbb42fc5add86
SSDEEP

98304:n1VGC09/o5WMF+TbKN5mHxHPUUBrQ3+9dYFIObJ7uoIiD0/3:uC35Nwb+5YxvrRdYvMoIR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bc133e9d56f9c24536ac72998cb4f90_NeikiAnalytics.exe

Files

6bc133e9d56f9c24536ac72998cb4f90_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 13KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 623.0MB

.vmsewm
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ripxrw
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ