1f32f51641ee9467426d8325960e9b00_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f32f51641ee9467426d8325960e9b00_NeikiAnalytics.exe
Size

5KB
MD5

1f32f51641ee9467426d8325960e9b00
SHA1

a564d2a0a0d03cfa10bc4e9346c589a2b798e3e0
SHA256

4b82dfc39199f559aa2c1cdc4d0c283ea7b5c52d9f9ff6b5bc8d9544a7c98983
SHA512

b8ce9f58309804e32067f41c974ab516830d9a10ec19adc910d0472ac071d5fcd51a08977e63bad0b32162a7bdb7e4048e93b43cf77023c31d79c857512b645d
SSDEEP

96:nEY2RrF1eqwi4SYwAM8TGTLVM1dxcSw6Q9:EHRh1eppSYHQa1dy6Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f32f51641ee9467426d8325960e9b00_NeikiAnalytics.exe

Files

1f32f51641ee9467426d8325960e9b00_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ