0ea036dce1b1d0c2108139b53096c890_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ea036dce1b1d0c2108139b53096c890_NeikiAnalytics.exe
Size

63KB
MD5

0ea036dce1b1d0c2108139b53096c890
SHA1

4c314a088f4a5ecf4cd15c9de48a398a4d43f745
SHA256

0cd1ebb8519b11cfb3ec2fb9cb38d21731c686541a9669107f07ca624fc6c0d3
SHA512

56ae8c84c7e58e8949749689ce830ba4611940fc5a8ff142843036db6c2d8c0f22759967c5a112a00926e6afa26574246faf4d442cff09bd813e0f7bb9b97b0d
SSDEEP

1536:q69J+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:L9WHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ea036dce1b1d0c2108139b53096c890_NeikiAnalytics.exe

Files

0ea036dce1b1d0c2108139b53096c890_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7b685827b70621628ca758dc08486ee9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesW
GetModuleHandleExW
FindFirstChangeNotificationW
SetConsoleInputExeNameA
WritePrivateProfileStructA
CreateWaitableTimerA
MoveFileWithProgressA
ReplaceFile
WritePrivateProfileStructW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE