924e6883afe77b790caf15d27e748710_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

924e6883afe77b790caf15d27e748710_NeikiAnalytics.exe
Size

1.2MB
MD5

924e6883afe77b790caf15d27e748710
SHA1

c9bfbe33d0597ec77434b438bc1f3ec7fe0d0b9f
SHA256

58a4d90f6155188836977f05df18e791b622ddde6788a19364ee53727ae9306d
SHA512

3ac101dc00b349f615e0023a69d70a902dc387e964cb2fdcaa62ddf8a267c3f553b0fa67519b15ffda9f68326f4137b7e2d893245a085829e9f7aac943d42377
SSDEEP

12288:SvaRJExKxxOm+uuBv3d7M2GAu1mt0LDwrepY4ldRNwnSa9TB63Q5q8gbcImt0LDB:ZEoym1uBv31M84pYA7wnNTB28Stz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
924e6883afe77b790caf15d27e748710_NeikiAnalytics.exe

Files

924e6883afe77b790caf15d27e748710_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\vpreview.pdb

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ