6061f05812456c1d30087f68a0750650_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

6061f05812456c1d30087f68a0750650_NeikiAnalytics.exe
Size

20KB
MD5

6061f05812456c1d30087f68a0750650
SHA1

d3723469a2a49835530ccb56490b4da8ac6d69fb
SHA256

1317981c16f60dfc6288b433d5a5293830d77618f34b0bbd0c0365fe33f04319
SHA512

a5b55b6670427f1bb8b5187d9f121c7d0711f346126ed989666632cdbed09d95fddaeb6bdae458e9e07846f25e199066bb846858d96a3c2dda1d78bb1144b04f
SSDEEP

384:cT4D/ItuVo7U9Q+9GsxFt1LP/zQjvcKfzGeqUwPl/5pDGkzZ9Vj:cT4D/IteZ/xFt5XzQ7c85L+/qkV9Vj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6061f05812456c1d30087f68a0750650_NeikiAnalytics.exe

Files

6061f05812456c1d30087f68a0750650_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

af2f778f767bf9fcd17e393879446d0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommMask
WaitCommEvent
EnumDateFormatsW
PrivCopyFileExW
CancelIo
CompareFileTime
SetHandleCount
GetFileSize
IsValidLocale
FindResourceA
LoadResource
CopyFileW
CreateToolhelp32Snapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE