93bb182b2967d1626dba0f73de53b920_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93bb182b2967d1626dba0f73de53b920_NeikiAnalytics.exe
Size

2.5MB
MD5

93bb182b2967d1626dba0f73de53b920
SHA1

fa245bf2f7c9a7ec2682d7a9adcc2cd6c8562786
SHA256

5a5fd4f70c5ebdf0ee58582b4a6ceea47e7b21473fde3e0d8ea9ac423084db92
SHA512

b46d67da77d4502d95d62108693dd7f7a3f849c9fdb06ff809ab367bf0ac07390c5fa25f1a5e5a0c948a37ecf3a2228b0951d01fcc9b53864849cd5fe5cf3ef0
SSDEEP

24576:lDKG+9Drndn2Tfh137EhRcmT5ycQYW3bMYLc6+udv1r3rdK1IP+vUx:5T+Brndn2TXEhRcm5HtQvVrdK1TMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93bb182b2967d1626dba0f73de53b920_NeikiAnalytics.exe

Files

93bb182b2967d1626dba0f73de53b920_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

IxpExecuteTest
IxpExecuteTestEx
IxpShowAdress

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 224KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE