4dfc03445d540362aacc78f14dc9d060_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dfc03445d540362aacc78f14dc9d060_NeikiAnalytics.exe
Size

634KB
MD5

4dfc03445d540362aacc78f14dc9d060
SHA1

41d4b26e0ccabe0c52213a65ffb15973a650c0eb
SHA256

af58d6af558c07c734b3ceae6fabd10ca8d38da9a978575b2f8f3c91587522f2
SHA512

2562988773e39811310ea410eec5487293a2c53144fdaee2013c6ee440c20f2e51b1005b46aa67e6e6e1a4dbbb0f5bb29d9b098c0ce8685f1ce499b34d62d5ad
SSDEEP

6144:IooZIFH5nOz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1i:ISF1I1gL5pRTcAkS/3hzN8qE43fm78V2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfc03445d540362aacc78f14dc9d060_NeikiAnalytics.exe

Files

4dfc03445d540362aacc78f14dc9d060_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE