823d9b17b7948dc6358dbcab834bb630_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

823d9b17b7948dc6358dbcab834bb630_NeikiAnalytics.exe
Size

63KB
MD5

823d9b17b7948dc6358dbcab834bb630
SHA1

30cb7d24970575d194ef71e67d86681c69f3b4f2
SHA256

06558a3b6090823119ddcbbddef2b1ccfcf5260ccc20801ed263ba77eb0bd192
SHA512

ad12498fb77e47b1612e0f02e039c34996fa90ef0d8893204a876669d1b5e5d302d9149efbf756f4490f2b2852bddb0e75788b558cc51a81edac817d357619fc
SSDEEP

1536:xdLDA+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:xF3Hwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
823d9b17b7948dc6358dbcab834bb630_NeikiAnalytics.exe

Files

823d9b17b7948dc6358dbcab834bb630_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

93dd14dab655e05e06318c623b408545

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleW
MapViewOfFile
CreateSemaphoreW
DeleteCriticalSection
HeapUnlock
SetComputerNameA
VerSetConditionMask
CheckNameLegalDOS8Dot3A
GetTempPathW
TransmitCommChar
LoadLibraryA
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE