a0373be994fc058256dfb8a7f88e30a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0373be994fc058256dfb8a7f88e30a0_NeikiAnalytics.exe
Size

932KB
MD5

a0373be994fc058256dfb8a7f88e30a0
SHA1

a95e81aaeee06af85e1e80a762e4dcce3b37a9a7
SHA256

0afd1d4463c2542c087eee847eb40f4277545e68a7051a3b42288e3dcf7271e3
SHA512

d22a35625300eb6fb09ff8a93f8bb8e424c1b55c438d4445b183cad535ef06ac085dbf9f14f83132327b78f885e0c158b19677b51b2dc28a3707ee6300f6056e
SSDEEP

6144:dDfb3BqG8EDe7MrDxF3hPzl40aFOlA53vi+sdMD9I1DL2izAVhjGsf+jVtq60Duv:RrFXl4NK4l4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0373be994fc058256dfb8a7f88e30a0_NeikiAnalytics.exe

Files

a0373be994fc058256dfb8a7f88e30a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 504KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ