8317edba51f01a9020d72ca3b2356600_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8317edba51f01a9020d72ca3b2356600_NeikiAnalytics.exe
Size

141KB
MD5

8317edba51f01a9020d72ca3b2356600
SHA1

bcc29715a433e342a2c1b01a1bdce7e6cf2d7296
SHA256

4964bd7f33e384278c3d6d6a14fb7a1342eadf2da6bddc61992d2fbeaf867040
SHA512

cb48df5aafb6027453ba96673a453a51feb7fd67e0e58a25d14c5c4c5552990f5d7ac257337f25266f535585323b11d0f93d45c89e145552d6aae25c9e74ecd4
SSDEEP

3072:wJx99Fmmt0fSoD74DqauQDrF4Z6h/SMYy87y:wVmmt0fSoD7yb/F66h/SMYy8O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8317edba51f01a9020d72ca3b2356600_NeikiAnalytics.exe

Files

8317edba51f01a9020d72ca3b2356600_NeikiAnalytics.exe
.exe windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mavinject32.pdb

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ