257b8aaab91a0b6da5b933a8bbe1d360_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

257b8aaab91a0b6da5b933a8bbe1d360_NeikiAnalytics.exe
Size

58KB
MD5

257b8aaab91a0b6da5b933a8bbe1d360
SHA1

0d8f8414a17473d4f9ce38be86f22d6d58863f2c
SHA256

3efbbd055562a957c564cff3ce82a1fc1fedbe9289afa9226e6ad6457512b7f2
SHA512

b9a0f11a6daec939182cf9de14f99b2e24396897d0da13034f17eb6544c09c5b2766bc9d237d66fcb743204a9988a70905794a2272d7705fb0c6f75c9ee7cfe7
SSDEEP

1536:l7X2lykmUO2drIYfdQ3W8PTZEd4Ejf/kE/Q6mhnDxMmKyx:VXmykmU9If3h1O4Eb/eOc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
257b8aaab91a0b6da5b933a8bbe1d360_NeikiAnalytics.exe

Files

257b8aaab91a0b6da5b933a8bbe1d360_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

sdhshfsf
Size: - Virtual size: 160KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdhshfsf
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE