f0f5ca506d36ca2ae0601f5b7fcd3850_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0f5ca506d36ca2ae0601f5b7fcd3850_NeikiAnalytics.exe
Size

35KB
MD5

f0f5ca506d36ca2ae0601f5b7fcd3850
SHA1

7ddefd813b57b84683c6164dc2ef4e9aed1e26da
SHA256

eb572257b79e13b042183c0aeb314bc409603c4359546a8e3380dbfebd029bb4
SHA512

2867c39c0c65a6ee6e4c0d6b3b9754aeb20d25e1336b40982d2e126b28a1ae71ca28381939f1e1420c65dd60f79b88497a9eaf9de1e25e21f97822e1e1aa9183
SSDEEP

768:9aXXWLTPmKcmpB0aKaRhxa+A2oajmY44m4m4m4PU:vPejUBRPpAjOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0f5ca506d36ca2ae0601f5b7fcd3850_NeikiAnalytics.exe

Files

f0f5ca506d36ca2ae0601f5b7fcd3850_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE