85209e7ef6dd657cb371e99548acdad0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85209e7ef6dd657cb371e99548acdad0_NeikiAnalytics.exe
Size

63KB
MD5

85209e7ef6dd657cb371e99548acdad0
SHA1

b22c8450970380abf27e763bc84e52e4c510a0e7
SHA256

eb3c2c38ffd0375f728001704bdfc6e1074f32a3d0fdb2d8b069ad0ce0ab9da1
SHA512

bf591730722111671e8d19dbda120d237651b61485ecd1599b07e0fb38aaca5ad664afa6e2c9f05f09f9a8fdfcf39700cbfc61a3153e55aedc2b239867e59237
SSDEEP

1536:dAfNk5yUinIbeuElSzzlDAP+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:dAyQUinIbevSzJDA8Hwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85209e7ef6dd657cb371e99548acdad0_NeikiAnalytics.exe

Files

85209e7ef6dd657cb371e99548acdad0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

79cd2793e419e2c3f1128af2cea0c9e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
SizeofResource
GetFirmwareEnvironmentVariableW
CreateSemaphoreA
TryEnterCriticalSection
GetNextVDMCommand
GetNumaProcessorNode
lstrcatW
EnterCriticalSection
GetTickCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE