7c496d5e2b996ce3f624c455929f5980_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c496d5e2b996ce3f624c455929f5980_NeikiAnalytics.exe
Size

70KB
MD5

7c496d5e2b996ce3f624c455929f5980
SHA1

c2b810447352f13ef276d2089fad41de51f28a44
SHA256

10866d73afdbc225e14d4eb54a8b62f8d1084777da6fd7f02dbec6ec4d436b51
SHA512

899bdf737af57a377f3ab3c90c94d3c5367b3f23e098754f329ae04c402d142a8eb4bfda40870f8a65eadd92044393dfe0b293a52b6834a7ad768d80be950a7f
SSDEEP

1536:14R9KzUD5X66zFOa2oNL0U/zDDiGPsMI7M+vec:2KzAXXzFt2oNJ/4M+vr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c496d5e2b996ce3f624c455929f5980_NeikiAnalytics.exe

Files

7c496d5e2b996ce3f624c455929f5980_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE