54a765f5e4686a6bdd1e7cacce092dc0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54a765f5e4686a6bdd1e7cacce092dc0_NeikiAnalytics.exe
Size

6KB
MD5

54a765f5e4686a6bdd1e7cacce092dc0
SHA1

2708a42e0d73c9079aa6036f4db83a33f6bddf2c
SHA256

922ab2472a41f02a488678947a4cf1e4cbbc81576ff6ba2ed9bc5e8e497dcea7
SHA512

a0541dfd3ba5d22d8f28f59632f9978e81a65bf2fb9f6a01f279f7214d8e333e6a30560dd6f281a9df5f5b42b50ccb1cc1be0676f1cebc0a18a898972f6be05f
SSDEEP

96:nEY2RrF1eqwi4bspfJ4bk1nLO2ZOwaQYzK:EHRh1eppIpfT1nK2ZtaQYzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54a765f5e4686a6bdd1e7cacce092dc0_NeikiAnalytics.exe

Files

54a765f5e4686a6bdd1e7cacce092dc0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ