98e3afc52260e3bc3870949589e844a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98e3afc52260e3bc3870949589e844a0_NeikiAnalytics.exe
Size

63KB
MD5

98e3afc52260e3bc3870949589e844a0
SHA1

e429c68a8b1bd203d3c0ee44116d2c1e85310826
SHA256

cba69d204b9e76632ab1f393ff7d37d14f9c3e2e6f97614022de8ab056baec4b
SHA512

b164c6a9faad11e3dced7e854abb4fc3c655c010a8eefb8b6827eb53279ca0fb05426d782e36db3eb848b451963e46a6df77383c8bda9d42d792146ac005d2a6
SSDEEP

1536:o4TnHiBSXX2Emkd4ykPKO+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:znHiBSXX2Emkd4tPIHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98e3afc52260e3bc3870949589e844a0_NeikiAnalytics.exe

Files

98e3afc52260e3bc3870949589e844a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1d016a4b90cc328f2b544584cc1e14cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreakProcess
ReadConsoleA
HeapReAlloc
GetStringTypeExW
AddAtomW
CreateRemoteThread
lstrcmpiA
GlobalDeleteAtom
GetConsoleAliasA
GetDllDirectoryW
MoveFileExW
UpdateResourceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE