8adb3c66f681484e7ba3dff275b9eed0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

8adb3c66f681484e7ba3dff275b9eed0_NeikiAnalytics.exe
Size

634KB
MD5

8adb3c66f681484e7ba3dff275b9eed0
SHA1

ea99dc7c98352b7a0ab0d06e1eea3b3e6507109b
SHA256

353e75ca373e0a4b786b3de289587f52d00fc23640c8f56884f8fbbf32af9975
SHA512

bff9e82c29461c0d8d78b10dbe1d6c3813aef91690bcb6d6c28dd429e6ceef93bda94a0582dba68c787d9ee0b73639c4e9457577265597800eff1cf7f0e0e334
SSDEEP

12288:ISF1Lw/1gL5pRTcAkS/3hzN8qE43fm78VU:NF1cy5jcAkSYqyEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8adb3c66f681484e7ba3dff275b9eed0_NeikiAnalytics.exe

Files

8adb3c66f681484e7ba3dff275b9eed0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE