9ea0c86cf777e17c0b7c0be9b44395f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ea0c86cf777e17c0b7c0be9b44395f0_NeikiAnalytics.exe
Size

34KB
MD5

9ea0c86cf777e17c0b7c0be9b44395f0
SHA1

cd50fbf0042a7b566a5d15b037e73fe2c0081600
SHA256

fcf94054e7b8f4c14f5d5e0dedb6af0639e6f8c5aea41c8c14af233dbe43005f
SHA512

0d26707293166345cd9f445de98406c0064bdef36a234cc777c1798ec4a06a816f30e96fcf7a6bfe0804559566919c86f36297e71a6384b2be26ff83dd633dde
SSDEEP

768:4Ut2D/+nvuGhbQugu27XzpoJ4f4feCGyD3pfz:M2nGcHmXloJ4wfeCG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ea0c86cf777e17c0b7c0be9b44395f0_NeikiAnalytics.exe

Files

9ea0c86cf777e17c0b7c0be9b44395f0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

0493264954cd5100c5fa796a7d50d2fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit

kernel32

FormatMessageA
LocalFree
GetModuleHandleA
GetLastError

user32

CharToOemBuffA

ws2_32

gethostname
WSAStartup

mswsock

s_perror

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE