271c92f7613afc474064df9e8eeb7b50_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

271c92f7613afc474064df9e8eeb7b50_NeikiAnalytics.exe
Size

32KB
MD5

271c92f7613afc474064df9e8eeb7b50
SHA1

f5f5b00dc4a4ec28fb253d0d76d3ada51d3b9b35
SHA256

9a559c9fb5d39abfb2f3134e50af306fea1fa674ad52e2918476b5105b03f2d9
SHA512

eae33cfc8c7bfb191bf700977eb44aa2abe9469acd41f67c8962943a9d23779c6e3105608b67ecfd09a1c99ce1da74fa1eba654d8715565a3c2e90c88fbfe79f
SSDEEP

96:sGcgchUoYRcE2zfZ6qimuA3cfmp1LlF19skvwAtvxojtDVfP3Ose9WJeF0+:sGciuXzfZ6jmzDhz9T3tv+tRf2sa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
271c92f7613afc474064df9e8eeb7b50_NeikiAnalytics.exe

Files

271c92f7613afc474064df9e8eeb7b50_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

12676ee4d080f5afeb08e69c495d0125

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
malloc
free
realloc
??2@YAPAXI@Z
_adjust_fdiv
??3@YAXPAX@Z

kernel32

Sleep
LoadLibraryA
FreeLibrary

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ