db3aaf8f65a2a0856e7f6cfa644c46a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db3aaf8f65a2a0856e7f6cfa644c46a0_NeikiAnalytics.exe
Size

45KB
MD5

db3aaf8f65a2a0856e7f6cfa644c46a0
SHA1

4b31eaf2df17649f2039173f80c042ef733de995
SHA256

8df252f3fb474c232877951f83d961beae5b0f52ed2fba9d82482fda4ad8d72f
SHA512

c67f3af12c086794837b0657df5a09d481baa95f7ae33f3a80a38e2dc6d214de398d59e556b1a9f648963aa3effc483f5ecff5a7ebc1d7c186e9fe8b27ecbf5b
SSDEEP

768:dQYx873M7mPZT9B5r8vglT3AUjtvs8lBITZ0P0uWI8jmY44m4m4m4PU:dV7mPHbLlDR5nJ0ujoU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db3aaf8f65a2a0856e7f6cfa644c46a0_NeikiAnalytics.exe

Files

db3aaf8f65a2a0856e7f6cfa644c46a0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE