dbaa8840c33f3f6433e621e0b3f4f460_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

dbaa8840c33f3f6433e621e0b3f4f460_NeikiAnalytics.exe
Size

3.1MB
MD5

dbaa8840c33f3f6433e621e0b3f4f460
SHA1

50c07fd40ed0195250bce4b14396fdd14c83bdf2
SHA256

569e0864243881dd0cf9a740c59d93727668272251cccfe49510a805f0c471b2
SHA512

023fa0dc380da64f357a000a3c47c4ad21811037c396a92fc844321b2f99336a3fa9d546d99b4d720d662b44a63a1dbf78c605350d15a139b5833fe21f7c1250
SSDEEP

49152:RqnstLet3LyvDzxgakOElMaFLkUF0mDta4/R:RqnstLEoDFgak7kCvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbaa8840c33f3f6433e621e0b3f4f460_NeikiAnalytics.exe

Files

dbaa8840c33f3f6433e621e0b3f4f460_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\olicenseheartbeat.pdb

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ