3966a4860a8c4fda448c2c05fc720c80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3966a4860a8c4fda448c2c05fc720c80_NeikiAnalytics.exe
Size

72KB
MD5

3966a4860a8c4fda448c2c05fc720c80
SHA1

11765616d10b8550e2ce8f11b7b5aa996634cea0
SHA256

03a5007b207b3ffdce8b792d8dc24c28b802096f390170903a3326d288b5951c
SHA512

f4cf913cfa7e50152150723feb22d31f7217aff163c6eafd160b1ef4560b3fffba1c347dbf7c2885a9ea0059fa2718b43c3fb5c2bc8b12a039c61a47b166c5d1
SSDEEP

1536:xr9S940hfcXdb8hnrBNf7IdWBeKzKLUHun+zmIGA/cJCH7:W940hNVBIdWBjUDA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3966a4860a8c4fda448c2c05fc720c80_NeikiAnalytics.exe

Files

3966a4860a8c4fda448c2c05fc720c80_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE