627855b03a2dac9a43843732495ff9d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627855b03a2dac9a43843732495ff9d0_NeikiAnalytics.exe
Size

81KB
MD5

627855b03a2dac9a43843732495ff9d0
SHA1

04dd203643b8856a6cb30571c6c2006e6e542080
SHA256

3b5d92f349c29b649e629d314f050d154d0dc37a1e43820358d572e5009fa930
SHA512

4f351e7e872396d874305f0391e5e277b70a107b3d99925f8fd41d99318e038129cf425d814389a47afb9e17f4d188ea2e0b8021a1184bd3d2620129ab7a6da0
SSDEEP

1536:f1Tzy48untU8fOMEI3jyYfPiuOgu6j9sE3:NzltUeOsa+u6j9sE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627855b03a2dac9a43843732495ff9d0_NeikiAnalytics.exe

Files

627855b03a2dac9a43843732495ff9d0_NeikiAnalytics.exe
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ