34ba9b79b7d2317c6395f12ec4ff1840_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

34ba9b79b7d2317c6395f12ec4ff1840_NeikiAnalytics.exe
Size

127KB
MD5

34ba9b79b7d2317c6395f12ec4ff1840
SHA1

a84f27a7c5bc651009cb3e6c989411d42347ed40
SHA256

514babc0fe82acff782a305a984e4bd6deed49611c6fab2cf860c05d06469030
SHA512

85dee6d6c00b195097e394a77d70d984e8ebe7afb4fa8c455d172db1439d636f1a6b26800ccf79b907d8b1c93fde49680acff5f78111b91a5af672fc248feb79
SSDEEP

768:b7uHj94SaX5dbRHhdkGXP8wAQscRtlu+FAr4ygtxFsPMXXKvAE8wrJi:3uiSC5dbpheGfnAQxh5FAr4ygGP2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ba9b79b7d2317c6395f12ec4ff1840_NeikiAnalytics.exe

Files

34ba9b79b7d2317c6395f12ec4ff1840_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ