5d651407f99ff7026b1bea8ca7f1f590_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

5d651407f99ff7026b1bea8ca7f1f590_NeikiAnalytics.exe
Size

9KB
MD5

5d651407f99ff7026b1bea8ca7f1f590
SHA1

79909ff0a8c466cc87a38c7755378feaa38fc742
SHA256

5ec64bc3ff5317a24146eca8753edfd622302b1e98c8bca4d2fbb9c56dc1b57f
SHA512

1f4f2a03de8877afd5db9e0cbf4b16df2a1285f38590454ce1e48159d103b427ba34b165b2241323e313d74332c473e291b1f5cbeb0b0e8fa8735574d7adfaa4
SSDEEP

192:2jLvomKpbUTt4XNi0xGPIm111l6qu58aeBYq1PQWKDFTBkg1cFNDseTA:g6bUO9TxGV1yqceBYqlGFlb1cFNDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d651407f99ff7026b1bea8ca7f1f590_NeikiAnalytics.exe

Files

5d651407f99ff7026b1bea8ca7f1f590_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ