9e4f78d54a1265ae5c5fa81c997f1da0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

9e4f78d54a1265ae5c5fa81c997f1da0_NeikiAnalytics.exe
Size

5.7MB
MD5

9e4f78d54a1265ae5c5fa81c997f1da0
SHA1

f32a96a7a068e604fd4bc15bef1d10ac349d95a0
SHA256

1be96ed61a62f887d0fe96366e936bf8bc3c9950a0290c85438b53197e9cf3a1
SHA512

63ca8a5a9af35a34f6664ffdbbbe6b86cc934785f86b9cd2b0561432dba067f58f5f1a55de585a99d34127fc6bb9f1dc8f6ed57aed334dc7f1b5aabeb87ac59e
SSDEEP

98304:rcu1HH0Wk7ge9EziQ1GQI9Cf3M/bl6hj:rbO9TT2Mh6h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e4f78d54a1265ae5c5fa81c997f1da0_NeikiAnalytics.exe

Files

9e4f78d54a1265ae5c5fa81c997f1da0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_rwcseg
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT_HA
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_rwdseg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ