92bf283af555d482163d6058538b5880_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92bf283af555d482163d6058538b5880_NeikiAnalytics.exe
Size

634KB
MD5

92bf283af555d482163d6058538b5880
SHA1

e7eba4b02a92ea1229718f34db930916c6d880d6
SHA256

fc3c92a4836fa7c95d47b952dcc11bea9b99b08da4964d1396ccddbb666f24d3
SHA512

e47daa8963b69a80128fb4ecd5d33a7547059e15d53d10941f4142d0a200e19520fe663065a371d754dea3579873c76b491a0189ea45d5814509de92e2212738
SSDEEP

12288:/OuNmxRij4/+tE8sHa4YutucsXdiyQOUp7CTbDnk88:/H0Hd+HeY9NJUp6nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92bf283af555d482163d6058538b5880_NeikiAnalytics.exe

Files

92bf283af555d482163d6058538b5880_NeikiAnalytics.exe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ