6f3271588b25e309f2e3166e08b0dfd0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f3271588b25e309f2e3166e08b0dfd0_NeikiAnalytics.exe
Size

640KB
MD5

6f3271588b25e309f2e3166e08b0dfd0
SHA1

16235dffa8c95e62791da5e8e2050756b01cc14c
SHA256

6bdc2ebce9e913c176d8864a925f55c4b9985abe237a8751b2f43589e154bfdc
SHA512

66260dfe616aced2f6bc1bca0b63e2211a91bc43fc2f62a116d2811ba832b7d4cfd5a0f489870867c0c2d698e36d92f14e0d377f71b60e28ecfa01796972244a
SSDEEP

12288:c2ggXHJeT8zAMVhKGlZQH0NFaS+Vx/Wk9SfAAKrDwaAX3KwRi:c2gyQT8xxla6FaV2Q1ASDwaG3Kj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f3271588b25e309f2e3166e08b0dfd0_NeikiAnalytics.exe

Files

6f3271588b25e309f2e3166e08b0dfd0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ