51e567c266bfcd690151299ed794fe60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51e567c266bfcd690151299ed794fe60_NeikiAnalytics.exe
Size

6KB
MD5

51e567c266bfcd690151299ed794fe60
SHA1

4dbcddb945ae9029377ed35753a98bcb9ff81e78
SHA256

71ce3469bfb22a699d6ae33751605e5969dd5cf0a78d84f16cbb5c2ee8a0e784
SHA512

ae87adb97e86ca3deadbdbc8c4706c47308078865f3e8f2a71a5452497efacff7c2467e260a3656ce81eb597519e70cd01bc0cc7e5192edb7d77f628f1e1b6e3
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIsysZTA+rC2Hrzyf2sBHaaprJRwh8al2ckTA6hp:unSR6bgYrysZTJrHSBXrUhhePp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51e567c266bfcd690151299ed794fe60_NeikiAnalytics.exe

Files

51e567c266bfcd690151299ed794fe60_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ