781d897b464d9c2972db96b39079e2b0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

781d897b464d9c2972db96b39079e2b0_NeikiAnalytics.exe
Size

25KB
MD5

781d897b464d9c2972db96b39079e2b0
SHA1

f6916a483aea1d5f8c78a0761d9867dfd48d6955
SHA256

e69834a8138481345b04640355732db31184ecd473a0c322f305fa9936a69b28
SHA512

836366fd9a46e7817502e674db42aaaf94dbcd6166bb5468ec4bf076bff589758eee6a98bef77dedcfa85d404a7ccb7ddef7dc75935bac8804a610b95f629ffe
SSDEEP

768:uYgQlevpDiSK6pX9B6U9E0G6xEpYHFSFX:lleh9KWHVKJFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781d897b464d9c2972db96b39079e2b0_NeikiAnalytics.exe

Files

781d897b464d9c2972db96b39079e2b0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

ccc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE