9e69931d7c4eec3568bf187fa97359d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e69931d7c4eec3568bf187fa97359d0_NeikiAnalytics.exe
Size

5.3MB
MD5

9e69931d7c4eec3568bf187fa97359d0
SHA1

3d649859cf8818f9f93c0c20a906a3e10767005b
SHA256

f78e26c8b95cd4f99da5f67f490145edd453e8300695c28cbdbbb78447075aaf
SHA512

c2aeddb0f00f1e5a7d01f77124d1e7fb7914d4733a8f2961f93612334ddd993238528b9c145292082e6863143a440fc06a6285ab8e229cb26278f5bf1d3dd3f7
SSDEEP

98304:gnsmtk2aKmY+8/prmfjF0yoqXjs214LeMWxdrLaygEnxTFW/4/yEOlCsv2Pv:+L5mY+YprmR3okBSAxdrLaBExp7/ClC5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e69931d7c4eec3568bf187fa97359d0_NeikiAnalytics.exe

Files

9e69931d7c4eec3568bf187fa97359d0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ